Thread regarding U.S. Bank layoffs

@dh So if dealing with ISS is bad now, it will be fixed by hiring people who are taught rote tool memorization instead of possessing security expertise, won't provide timely feedback to help remediate issues by code freeze because of the time zone difference, and have an additional overhead of onboarding from across the planet?

@bb No it doesn't. There's plenty of work to go around in ISS. It's just that the tools and processes have changed to remove as much onshore expertise as possible. Vulnerability remediation is now AI telling devs a library that isn't in use or exposed to the public is critically vulnerable and the devs clicking a button to use the AI suggested fix. The ISS analysts don't offer much advice on how to fix things anymore. They only advise on how to make it through the process. And that's work that will be sent offshore. It's intentional and, in my eyes, dangerous.

@ap from what I’m aware of - employees I know of were notified that Dosent mean all the ones that will be impacted have been notified yet

Most were hired during covid, too many staff, and many are remote.

@a2 if you don’t know you are on the wrong company’s page

ISS are likely to be consolidated into Shield Platform, similar to Rob Hewitt (bt l***). This raises concern that non-technical risk and control functions may end up designing and implementing technical solutions that should sit within a strong engineering organization. This may be worth raising as a question during Dilip’s all-hands call, particularly around the impact on Shield’s technical direction, engineering ownership, and long-term value.

Did they already notify the impacted employees today? Or just their management

@a2

ISS=Information Security Services. It’s a dumpster fire with loads of dead weight, but let’s hope they made cuts where needed and not essential folks actually doing the heavy lifting.

He misspelled ISIS

@OP International Space Station

What’s ISS?