#fwd — Public Fediverse posts on home.social

After this week at #fwd:CloudSec and #reInforce , I have some thoughts on culture and how it contributes to the security of an organization.
Time and time again, I would learn of a winner take all company culture at #aws. It’s a place that seems to harbor bullies as long as they are considered ‘productive’. It’s a culture where mistakes are not just learning opportunities but something that WILL HAVE consequences. A thread of fear seems to persist across teams to meet expected metrics and to deliver at all costs.
Not only is this a place I will NEVER WORK. It’s also a company culture that will breed security mistakes.

It makes people defensive when presented when a counterpoint that their service might have unintended consequences. It prevents people from transforming bad architecture for fear for failure.

The #aws culture rewards incremental delivery of features regardless of security consequences.
I’ve become even more pessimistic about the future of cloud with #aws at the helm.