FIS security policies have been tightened to the point that it is almost impossible to comply, and product teams across the are unable to release software patches. Clients are up in arms, and will only become more enraged when they realise why they can’t get their patches. Every so often a case gets escalated to KB who then shouts at DD who will grant an exception. Otherwise the FIS security team is digging its heels in, regardless of the cost to the business.
6 replies (most recent on top)
press release will be going out
Security is taken very seriously at FIS. With FIS security, you don't have to worry about unwanted access to your environments. In fact, our policies and procedures guarantee that no one at your institution or FIS can get access at all
This company is a joke. Delusional, and our security team together wrote zero lines of code; even if we count AI coding, it is still zero.
You have servers that are EOL but we don't have capacity to give you new ones? That's still your problem and you will fail the CGR. And we'll make it as painful as possible to get your exception approved. Then when we give you the exception, it's for 1 month which is totally plenty of time to get a new server and migrate everything over without affecting reliability.
Your servers have vulnerabilities that are past due and they're the responsibility of one of the central teams? Your product is still sc--wed even though you can't do anything about it. And those teams don't really care because it's not their product on the line.
the SS Ferris had already hit the iceberg and been taking on water for a long time
"A fish rots from the head down". Time for new leadership. Current management is navigating this ship into an iceberg.
*across the board.