Security Basics mailing list archives

RE: Segregation of Development and Production Networks


From: "David Gillett" <gillettdavid () fhda edu>
Date: Mon, 6 Oct 2003 08:52:43 -0700

  Marketing I can see, but accounting?  They tend to be
REAL conservative.  (Lumping Marketing in with Accounting 
is one view of how Enron ran into trouble....)

Dave Gillett


-----Original Message-----
From: Walter Wart [mailto:ribbit () speakeasy net]
Sent: October 2, 2003 17:39
To: security-basics () securityfocus com; gillettdavid () fhda edu
Subject: RE: Segregation of Development and Production Networks


  Best practices dictate that production operations fall
under the company Operations structure which, if not a
separate division in its own right, is part of the finance
and accounting organization. Development is usually part
of an Engineering structure. COO versus CTO.
  This seems to be the only way to give production operations
the necessary authority to reject stuff out of engineering
that isn't quite "ready for prime time".

Strange, my experience has been that the accounting and
marketing types are more likely to push for release of stuff
that isn't ready and promise the moon to the hapless 
victims^H^H^H^H^H^H^Hcustomers while engineering is
trying to apply the brakes. Sometimes to the point where
things that should have been released weeks ago are still
being polished.

---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: