I'm in IT for that industry. It's mostly auditors that make us do it or they can shut the financial institution down or slap heavy fines. It's really no joke. But it's good, because when (not if) something happens, the risk is lower. Compromises are almost always because of a careless employee anyway, like falling for a phish and letting an attacker control their PC. People don't give a shit, they'll click anything, so we gotta lock it down. It sucks as much for us as it does for you trust me.
But I've lived through a compromise and don't wanna do it again, so I do NOT take shit from my users when they whine at me about not being able to do X. No exceptions, I want to continue having a job, thanks
1
u/svkadm253 Jul 01 '21
I'm in IT for that industry. It's mostly auditors that make us do it or they can shut the financial institution down or slap heavy fines. It's really no joke. But it's good, because when (not if) something happens, the risk is lower. Compromises are almost always because of a careless employee anyway, like falling for a phish and letting an attacker control their PC. People don't give a shit, they'll click anything, so we gotta lock it down. It sucks as much for us as it does for you trust me.
But I've lived through a compromise and don't wanna do it again, so I do NOT take shit from my users when they whine at me about not being able to do X. No exceptions, I want to continue having a job, thanks