If the UK was a US state, it wouldn’t quite be the poorest per capita. It would be USD400 per person better off than Mississippi. Everywhere else – from Arkansas to Washington – would earn anywhere between several thousand to several tens of thousands more.
- Two-factor authentication (2FA) - Not stipulated
- Access control for any accounts that store sensitive information - Access control policy is required
- End-to-end encryption - Not stipulated
- Training staff in data protection awareness, and a data privacy policy - Training policy is required
For the controls not stipulated in the standard (e.g. 2FA, E2E encryption), you may find you ultimately need them once you do an information risk assessment. As long as you explain clearly why the risk is not significant enough to require it or have good alternate controls, you won't get dinged by the auditor for not having these.
The standards are not incoherent. However by design they need to be abstract to apply across very diverse businesses.
I've implemented ISO 27001 myself (solo dev founder, 6 person company, USD2mn SaaS). The divergence in quality of the implementation depends on whether the company is actually using IS027001/SOC2 as a tool to formally define, implement and monitor information security or finding the path of least resistance to accreditation.
I've successfully implemented ISO 27001 (CTO, Sole Founder, ~USD2mn ARR SaaS Business). Had a small team around me (5 people) but essentially implemented ISO 27001 myself spread out over 6 months.
Would be very difficult to write a complete guide - it's a long journey and accreditation requirements very specific to the business. Do you have specific questions or areas of concern in mind? Been thinking I could write a few blog posts about my experience.
UK expat in NL (3 years). Concur wholeheartedly. The Dutch have nailed their SSO app (DigiD) - this is the model to copy.
It eliminates a multitude of steps (sign up, proof of identity, credential management) to accessing any government service from booking COVID tests to paying taxes.
I'm a British software developer and SaaS business owner
I left the UK in 2017 because of Brexit. My company generates about GBP150k per employee. Prior to leaving this was 100% UK workforce. Following my relocation this is <50% and falling as we move to contract-based + remote. That's my n=1 experience with the "brain drain"
When I left the UK, there was a large & growing political/economic divide, unaffordable housing and poor/declining public services. It gave me a lot of stress and anxiety. Having left, I feel more disinvested from how things are turning out in the UK and it's helped greatly with my wellbeing
I've met other brits in my host country that share my n=1 experience. We're all just trying to quietly get along with it really - stay working and raising families
I'm an EU resident with a SaaS business storing EU personal information.
It's forced us to think more carefully how we build systems to pick up, retain and scrub data. So all clients (>1,000) and their clients (likely in the millions) have benefited
They absolutely won't have noticed a difference - by design!
Unbeknownst to downstream users, there are now more rigorous systems in place to manage this information and reduce the surface area where it might be captured
> where we should have (and ended on) docker / compose
We ended up doing this too.
Do you have any links to deploying docker-compose in production? We've not been able to find out much. However our solution seems to work well - am keen to find out how other people are managing host setup, updating and remotely controlling docker-compose
In our setup, we essentially use docker-compose as a process manager:
- Updates with docker-compose.yml via git syncs
- Logging via journald (which in turn is forwarded)
- Simple networking with `network: host` and managing
firewalls at the host level with dashboard/labelling
- Restarts / Launch on startup with `restart: always` policy
IMO, more straightforward in the past
1) Entrusting everything to a package manager or build script which might break on a new version release
2) Maintaining ansible script repository to do the host configuration, package management and updates for you - these too always need manual intervention on major version updates
Congratulations on the launch. It looks great and I wish you success on this project
Could you kindly answer this question for me. How does your product compare to pushover.net? Are the problems to be solved the same? What are the tradeoffs?
That's fair, the London-Manchester issue is specific to our particular client base.
However the absurd cost of low quality rail travel (often standing room only, less frequent trains following new time table, poor customer service) is real. Right now I'm paying £3.5k a year for an annual rail pass to take me into work (for instance). The alternative would be to move further into London and pay double in rent for the same accommodation / standard of living
This is welcome move by the new Home Secretary, but the thing that terrifies me the most is the end of free movement when we leave the EU. As the director of a software development business, I have to contend with a very tight market for good developers.
After brexit takes place, any EU citizen I wish to employ will have to go through the Tier 2 visa route. There are 3 major issues with this. 1. It's capped at 20k people per year. 2. We do not have the deep pockets and the legal/HR team to navigate the home office to procure such a visa 3. It does not provide sufficient guarantees for bringing and settling down a family
On top of that, we also have to contend with many structural issues that makes the UK (London in particular) a less appealing place to attract talent:
- High cost and low quality of living in London
- Poor transport infrastructure (it's cheaper to eurostar London-Amsterdam than train London-Manchester)
- UK politicians and media do not stand up for the benefits of immigration and is willing to allow blanket demonisation of immigrants to go unanswered
- All the negative externalities associated with an overcrowded city (overcrowded public transport, knife crime, NOX pollution in excess of legally permissible levels)
Given you think that the economist dogmatically believes in less tax, regulation and trade barriers, it seems more likely you don't actually read the newspaper very closely.
Take healthcare in US for instance. The economist consistently favours more government intervention and higher taxation with a single payer health system. Just taking one example from the current Europe editor (I think): http://www.economist.com/blogs/democracyinamerica/2013/09/he...
> In fact, government intervention is often necessary in order to bring comprehensibility to a bewildering private landscape.
IIRC, there was also a time when Elasticsearch used multicast by default to detect other ES nodes on the network and to add them to the cluster automatically. So any node joining the same network will join a cluster and have shards allocated to it
Given Trump's propensity to publicly denounce individual organisations, including threats of withdrawing government business, it's hardly surprising that companies are now lining up to court Trump's favour in the same vein as Carrier. The only thing that does surprise is just how quickly companies are adapting to the new game and lining up to present King Trump some kind of offering.
> Which leads to the 'callback hell' that we all know and hate. Part of the bill-of-goods we accept when using Node is that in exchange better time and space characteristics, we lose the thread as an abstraction.
Perhaps my head has been stuck in javascript/node land for too long but I think accusations about javascript producing callback hell now seem a bit disingenuous even for relative novices to the language.
It's 2016 and there are many well documented and widely adopted solutions arising from external libraries and developments in ECMAScript. Thanks to transpilers like Babel/Typescript we can even shoehorn these new ECMAScript features into older browsers.