Audit team requested proof that our lower environment database does not have production data.
We sent them a screenshot that only I understand.
They said "Awesome. Thanks"
I could have sent virtually anything.
I can't even.
@Reincarnation_6 Yeah, but this is a bit like meat factory testing. You COULD send any result... Until such time as you got sued for listeria or salmonella poisoning consumers.
In that light, it seems like a CYA request from the higher ups?
Not saying it was, but could be read that way.
Yup.
95% of audits are the CYA kind.
Hell, I dealt with IT auditors that don't even know what ActiveDirectory is, yet were charged with assessing server access.
Reminds me of that large outage few months ago that CrowdStrike caused.
"The intern did it !"