smu

That’s really interesting. What does your routine look like?

About the fines, there’s a second option: make them more frequent, so there’s less chance on getting away with (minor) transgressions.

This would require well staffed regulatory bodies. At least for GDPR, I don’t think we have that.

To provide some additional context to OP.

In the CRA, there’s (among others):

- reporting of actively exploited vulns or severe incidents to a national cert

- reporting obligation of vulns to the provider of that vulnerable code

- mandatory vulnerability disclosure policy (to receive vuln reports)

- obligation to provide security updates and alert customers when a vuln has become known

We’ll see how well this is all followed, but from a security perspective these are all good ideas.

I hitchhiked a bit during my college days, so I feel a moral obligation to pick up others if I can. Doesn’t seem to happen as often as it used though.

Worst that happened to me was a very smelly drunk..

It’s pretty much about stretching yourself but not overstretching. The classics might be the latter for a teenager. I guess it depends on the person.

Not the OP, but as an avid note taker (I prefer A4 sheets), I often have trouble to keep my notes organised (spread over office, home,…).

That is the main reason I’m thinking about an electronic replacement.

Agree, it’s the only way for us to test our assumptions.

I wonder how well the experimentation approach will work in this case though, as:

1. Effects might be subtle and outside of the expected impact area.

2. Timescale might be really important (effects over a time much longer than we anticipate. Or even a timescale that makes it impossible to run many experiments in reasonable time)

We don’t know what the second and third order effects would be. We can’t even correctly predict what the weather will be 3 days in advance. No chance that we can predict what the consequences of such a significant and never been done change would be.

Seems like a high risk play, only to use as a last resort to me.

Nice feedback loop you have there! (re last point). If you can point to the actual proven ‘indicators of risk’ instead of flagging every potential issue onder the sun, everyone is going to love you!

I look forward to a summary report on incidents somewhere in the future ;)

Thanks balgan!

* Do you know if there are any follow up meetings planned? Did they discuss some kind of process?

* what were the main concerns discussed?

* interesting to find out about the coalition (I was briefly involved in a similar insurance setup in my home country). Is your ‘baseline’ derived from some standard? Can I find it online?