laudablepuss wrote:

Actual conversation I had the other day with him

Boss: Gents, I am going to start going through the CIS Version 8 controls ahead of any security assessment we might be asked to do, so I will be firing questions at you from time to time. Here is the first: 1) does anyone have rights to add devices to our network but you three? 2) Do we have a way to review what devices are attached to our network, and 3) are those devices reviewed from time to time to determine if they are supposed to be attached?

Me: Your question is, do we have a NAC solution. Not that I'm aware of.

Boss: No, my questions are specific above

Me: Question 1: rights to add a device to the network. This is the definition of network access control. We don't have that.
2: yes sorta, and as an example [description of some troubleshooting we did recently]. But this is another handy feature of NAC
3: no, because the devices we see are just a list of macs for the most part. This would be a thing we could do easily with a NAC

Then he called me to say that he knows what a network . . . what was it? Access control is. I KNOW THAT OK.

Today he basically read us a 90s chain email. "Bill Gates said that if Microsoft built cars everyone would have them and they'd cost $500. Then the GM of General Motors got on and HUGLGAGLGLALGG".

It's not a bad job, really, and I'm finding him more entertaining than soul crushing. If he were more hands-on I'd have to kill him, though.