Forum Overview :: Still Life :: Re: Let's talk about my incredibly stupid boss

[quote name="laudablepuss"]Actual conversation I had the other day with him Boss: Gents, I am going to start going through the CIS Version 8 controls ahead of any security assessment we might be asked to do, so I will be firing questions at you from time to time. Here is the first: 1) does anyone have rights to add devices to our network but you three? 2) Do we have a way to review what devices are attached to our network, and 3) are those devices reviewed from time to time to determine if they are supposed to be attached? Me: Your question is, do we have a NAC solution. Not that I'm aware of. Boss: No, my questions are specific above Me: Question 1: rights to add a device to the network. This is the definition of network access control. We don't have that. 2: yes sorta, and as an example [description of some troubleshooting we did recently]. But this is another handy feature of NAC 3: no, because the devices we see are just a list of macs for the most part. This would be a thing we could do easily with a NAC Then he called me to say that he knows what a network . . . what was it? Access control is. I KNOW THAT OK. Today he basically read us a 90s chain email. "Bill Gates said that if Microsoft built cars everyone would have them and they'd cost $500. Then the GM of General Motors got on and HUGLGAGLGLALGG". It's not a bad job, really, and I'm finding him more entertaining than soul crushing. If he were more hands-on I'd have to kill him, though.[/quote]