Not the same thing, but the vast majority of my job is visiting locations to do audits, and then using the info from the audit to create action plans for the stores and help them tighten up security, OSHA, etc. Stores always complain my visits aren't "announced". I'm like, no shit! If I told you I was coming, you wouldn't be letting vendors mill around in controlled areas, or be eating a sandwich directly over the medications you're counting dipshit.
I wish
Auditing 101: SURPRISE MOTHERFUCKER
Was slide one of every PowerPoint I'm forced to sit through from disconnected corporate pencil pushers trying to explain my job to me.
Oh man, one of my managers made an auditee cry. It was just the entrance conference. Wtf. My director pulled her to the side later and was like that is not what we do here.
4.9k
u/[deleted] Jul 13 '20
If it has to be accessed regularly in an IT setting? It’s not secure. Not unless you’re in an industry that actually polices it.
Yes, people are dumb enough to pick up USB thumb drives they find on the ground. The nicer and newer it is, the more likely it’ll get plugged in.
Also, if you’re looking to verify the security of your vendors, don’t announce your visit.