My teams run some fairly central backend systems at <my employer>, and *for years* one of our mission statements has been "never be the reason <our employer> winds up on the front page of a major newspaper."

RE: https://infosec.exchange/users/JosephMenn/statuses/112203449000985344
JosephMenn  
SCOOP: The independent Cyber Safety Review Board will say in its forthcoming review of China hacking Microsoft that the company had cascading, avoi...

@rossgrady

I always bristled at putting things that way, because taken literally it means that misleading the public is within the purview of the team. Though that might be a very academic distinction if the teams responsibility was reliability as opposed to e.g. security.

@robryk I hear that! I ~hope~ that we've always been on the same page that it's about running as secure & reliable a platform as we can . . . and I think our SRE culture is strong enough that hopefully nobody misinterprets it as a statement about secrecy.
Follow

@rossgrady

I don't think a straight up misinterpretation is the main risk here (for reasons that you mention: if someone interprets it that way the company has bigger problems). There has to be some prioritization between different kinds of potential outages for cases where you have some measure of choice. Stating things this way provides a way to prioritize them (pick one that has the lowest chance of yielding a frontpage article) that's not necessarily the intended one, and this IMO is actually somewhat likely to be picked up by totally reasonable people, especially if they are under time pressure.

Sign in to participate in the conversation
Qoto Mastodon

QOTO: Question Others to Teach Ourselves
An inclusive, Academic Freedom, instance
All cultures welcome.
Hate speech and harassment strictly forbidden.