Call us now:
A nice summary of the root cause issued by CrowdStrike following the 19th of July incident. More meat to add to the bones of litigation lining up following the incident. That goes someway to justifying the Crowdstrike, Microsoft legal strategy and response to Delta.
‘It came down to a mistake first-year programming students are taught how to avoid’
‘Falcon expected the update to have 20 input fields, but it had 21 input fields.’
This count mismatch is what caused the global crash, CrowdStrike said
One wonders what Deltas lawyers will make of the report. Would one expect oversight and assurance through testing before the release of a fundamental update to code buried in the Kernel of an operating system.
Would this not be the ‘bread and butter’ of a security company?
Hindsight is a wonderful thing. Imagine if the development team ran the update across a few machines in the dev, test, environment before it was released?
One wonders the governance over the Dev Sec process.
@Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Faisal Khan
Veritas GRC Senebria
#Resilience #incidentresponse
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7226862007516299268