An unnamed corporation has web sites that are all managed as a single tree with a a single backend staging system. Because of technical problems with the current content management system, they are migrating to a new CMS. In the meantime, whenever there is new critical content that must be pushed, the staging server must be taken offline for 24 hours.
On the third Tuesday of every month, they have a contractual obligation to release security patch testing information to their customers via a secure extranet. Last month, their corporate communications had a press release that "had to go out" on the same day. The press release won.
Yes, they held critical security vulnerability information about their software products for 24 hours so that they could get a press release published on the main web site on time. Anyone want to answer that interview question: "You withheld critical security vulnerability issues from your customers so that you could issue a press release?"
It would seem that internal communication needs much improvement.
No comments:
Post a Comment