jnorthrop

There is this condition

> Recognizing that reality, the Commission’s proposed order will follow Rellas even if he leaves Drizly. Specifically, Rellas will be required to implement an information security program at future companies if he moves to a business collecting consumer information

I'm not aware of any other decree following the CEO to other companies.

I'm not sure who downvoted you. It is a good question. McDonald's and other consumer goods type companies are not sanctioned, so the company can sell its assets. For that matter they could continue to operate as normal in Russia if they choose.

Sounds like you need to change the intent of your 1:1s. I am senior at a big company (managing teams of teams) and my manager is a senior executive. I meet with him every other week and that is most of the contact I have with him. That works, as he trusts me to execute on his strategic objectives, and I like it like that. Our 1:1s are very purposeful. I inform him on things I think he should know, ask him for support where I need him, and remind him of my career aspirations to get opportunities that move me in that direction. That's it. It ends up as a nice conversation and gets us both what we need. It sounds like you could move your meetings in that general direction.

Not to mention low probability of natural disasters: Earthquakes, tornados, wild fire, hurricanes, etc.

There no longer exists any real debate. Effectiveness of the vaccines have waned over time but as stated in the article "Our findings support the conclusion that COVID-19 vaccines remain the most important tool to prevent infection and death."

> These companies can afford good cybersecurity but don't want to spend more money than the damages they would incur from a successful attack.

A bit off your "real" point: No company should ever spend more mitigating a risk than the potential cost they could incur from the risk. That is just good business, but the reality is that companies generally won't spend more on cybersecurity than their peers (either as a percentage of revenue or percentage of IT spend). Whether that is the proper balance for a risk/spend calculation is the real topic.

The problem is that we can't accurately calculate the probability of a cyber event and the cost impact of that event. So the company is stuck waiting for an attack on themselves or one of their cohorts so they can adjust.

I'm in Information Security at a large enterprise. We look for this kind certification, but it isn't required. Not having it though will lead to further scrutiny (lots more questions to answer). I would recommend getting it if you can, particularly if you are offering a service that is hosting the customer's data and/or is managing some part of their IT operations.

Bolstering the recommendation is the fact that the proliferation of supply chain attacks recently is adding pressure for companies to perform more thorough diligence on their vendors. The certification helps check all the boxes.

> If you won't trust the voting public enough to give them the whole truth and instead treat them like blubbering fools, how can you--with a straight face--pretend that their ability to pick leaders or vote on actual issues is a correct way to run a country?

Mr. Politician replies, "I trust the individuals that voted for me. They're smart. Its the public in general that can't be trusted."

I agree with your sentiment. I was 51 when I last applied for a job at a new company. Initially I was getting very little interest in my resume. Then I cut out the first 10 years of my career from my resume (and LinkedIn), and downgraded the oldest position listed from a Senior Lead to just a developer -- essentially making me appear 40 instead of 50. Within a couple of weeks I started getting responses.

And it is not like my work from 1990-2000 wasn't valuable. I worked on a complex large scale analytics system in the early 90's and migrated to large scale web-based applications in the later half of the decade. I'm proud of that work and have some interesting lessons and stories from that time period, but they are telltale of my age and were working against me.

From the Tweet, "Was just on phone with someone who works for FB who described employees unable to enter buildings this morning to begin to evaluate extent of outage because their badges weren’t working to access doors."

Thank you for that well written article. As a curious techie, but someone unfamiliar with the subject, I found it approachable and easy to understand despite the complex topic. Not an easy task -- well done!

I also own a Boox Air and I agree with everything you wrote. It is a device built for specific purposes. I get a ton of use from mine. It sits next to me all day for note taking, and I have my Kindle, Instapaper, and Safari Books apps for reading. I don't use it for anything else but that isn't the intent of the device. If you are looking for something all purpose, as you say, look for something other than eink.

I agree with you but you can't just throw around the phrase "sure it costs some $" as if that isn't a driving force in everything a big company does. My company is going hard into Azure and I'm making the same recommendations as you suggest, but it is a hard sell precisely because of the cost.

Yes, they more or less invented the concept of just in time delivery, but they also suffered supply chain issues after the Fukushima earth quake. After the latter incident they made the risk calculation that inventory of some parts was worth the expense.