Earlier quoted context omitted.
However they now have to be trusted. It might have been better to have figured out which you trust and only use those.
Indeed, what amazes me is the implicit distrust so many managers have. Either they have a pretty low opinion of people, or they are lazy themselves and projecting. I've had managers openly say to me 'well we have noone else to check your estimation with'. Are there really that many devs out there that estimate 10 days, finish in 1 and take 9 off??
Most “mandatory requirements” in corporations are imaginary
201–210 of 405 posts
Re: Most “mandatory requirements” in corporations are imaginary
#202Earlier quoted context omitted.
An example, I'm unable to resolve so far: ISO 26262 includes the requirement to prevent “implausible values, execution errors, division by zero, and errors in data flow and control flow” (8.4.4). I'm confident the division by zero aims at integer division because the result is undefined. For floating point, division-by-zero is perfectly fine and well defined by IEEE 754. Nevertheless, our safety folks require us to e…
Mandatory additional detailed info: Division by zero in floating point equals to Infinity because in a floating point data structure there is space to represent such a value. For integers, there is no such information and therefore an exception should be thrown. For a 32-bit float, the following are true: Positive infinity: 011111111(and then 23 zeroes) Negative infinity: 111111111(and then 23 zeroes) NaN: x11111111(…
Re: Most “mandatory requirements” in corporations are imaginary
#203Earlier quoted context omitted.
Not really a fair assessment. An auditor's job is often to check if you're doing what an external standard says you should be doing (SOC 2 => AICPA trust principles; FedRAMP => NIST 800-53, etc.). Unfortunately, these external standards may be written vaguely and while you may have policies that define X as Y, the auditor doesn't have to accept your answers. For example, when PCI requirement 5 says "Deploy anti-virus…
So every team gets to argue with the auditors? Seems like the people writing the policy should do that so there's one argument instead of n.
Are they hiring?
Re: Most “mandatory requirements” in corporations are imaginary
#204My reason for this rule would be: if you allow consultanta to work from home, how do you make sure they are not double- selling their workhours? Like they bill you 8h, but only work 4h on your project.
What stops your employees doing the same thing?
Re: Most “mandatory requirements” in corporations are imaginary
#205The whole problem seems to pivot around blame. Having only ever worked at a small company, I've enjoyed the absence of fear of blame. When the hierarchy is so minimal risk-vs-benefit seems to be easy to communicate and digest between both ends of the spectrum and accept with shared responsibility. I understand this doesn't automatically scale, but it feels unsatisfying to assume blame is as inevitable part of growth.…
My pop-science (I learned about Dunbar's number from Malcom Gladwell's 'Tipping Point') theory for this is that we're wired to think of some small set of people (~150) as 'our group'/'my people', and that within that group we're more likely to forgive, and outside that group, we're more likely to blame.
Re: Most “mandatory requirements” in corporations are imaginary
#206I had this experience with some companies I was interviewing with. They would force me to submit my most recent payslip from my previous employer. I gave up after some protest, coz they could not have proceeded with my interviews without it.
Re: Most “mandatory requirements” in corporations are imaginary
#207In BigCorps, if there's a stupid requirement, there's usually a reason for the stupid requirement to be there in the first place but getting to the reason might require un-peeling a few org layers to since the people enforcing the policy will not be the people who wrote the policy. A more productive use of time would be to understand the reason for the policy, document out why it doesn't apply to your case and then a…
> but getting to the reason might require un-peeling a few org layers to since the people enforcing the policy will not be the people who wrote the policy. The issue is that all the policy documents often only contain the One True Way to achieve their goals, while the goals remain unstated. The documents should always come with a rationale. And appending "exceptions may be granted for equivalent or better processes"…
Re: Most “mandatory requirements” in corporations are imaginary
#208Earlier quoted context omitted.
I believe it's all about Security (C-I-A). To mitigate this issue, on paper, an (usually) HR policy writes "do not do non-work related stuff with your work computer". And since many people ignore this rule, because "why have a second laptop?", the next best thing is to route all traffic from your laptop through the company, and weed out the GigHubs and GitLabs of this world (in the same manner that they block all sex…
> That said.. why would a person use the corporate computer for their (allow me the use of the word) 'hobby'? Because my work computer is around 100 times faster than my personal one.
Re: Most “mandatory requirements” in corporations are imaginary
#209What the author is describing here is poorly designed management incentives.