Five boring practices: What 25 years of public-sector software taught us about security
You can build it in an afternoon. Now keep it running for a decade, and explain one of its decisions to a court. After 25 years building software for municipalities and government agencies, Frode shares five practices that hold up in a public-sector security review: access control as the floor, no secrets in generated code, audit records written before features, rules a caseworker can read, and an off switch the customer controls. Plus four things we got wrong along the way
-
Frode Ettesvoll CEO 
