|visits||member for||3 years, 5 months|
|seen||Sep 1 '11 at 14:57|
Our security auditor is an idiot. How do I give him the information he wants?
@Agos: I worked at a place a few years ago that hired an agency to do an audit. Part of the audit included calling random people in the company with the "<CIO> asked me to call you and get your login credentials so that I can <do something>." Not only were they checking to see that you wouldn't actually give up credentials, but once you hung up on them you were supposed to immediately call <CIO> or <Security Admin> and report the interchange.