As you know Dave, the real work comes when some System Auditor wonk now comes along and says
‘OK. well done. You protected everything when it became common knowledge that Razer mice were a security issue. Now prove to me that no-one has used this security hole in the last five years. It also seems to my all-powerful twenty-twenty hindsight that this may be a fundamental problem with all unapproved plug-n-play equipment. Prove to me that no-one has plugged in any unauthorised plug-n-play kit in the last seven years!’
Of course they then escalate the amount of work when it proves impossible to churn out such answers for the time before the appropriate software/hardware was installed.
As most of these Auditors previously had some Sys Admin’s job, but failed the Interpersonal skills bit, I’ll swear that they deliberately choose questions that give you the most work!
.
