Post: No surprises then?
No surprises then? →
Posted Tuesday 15th April 2008 10:36 GMT
In Regulatory compliance 'irrelevant' to security
This reminds me a lot of the ISO9000 accreditation debate. It has nothing to do with quality (even though it's a "quality" standard).
As one leading business chappie said some years ago (I'm afraid I don't recall who it was) "ISO9000 has nothing to do with improving quality. It's just a way of ensuring the production the same crap consistently".
