Managing human error
Even though we have lots of tools and measures to secure our environment, we might not be able to avoid human error. As an example, the following things might happen:
- Someone might accidentally delete a production environment on the cloud environment
- A developer might accidentally check in secrets
- A network administrator might accidentally open a port to the public
These things might happen and we should be prepared for them. In the next few sections, we will talk about how to deal with human error and how to learn from it.
Building a culture that allows for mistakes
The first thing we should do is build a culture that allows for mistakes. This might sound strange, but it is very important. If you are working in a culture where mistakes are not allowed, people might try to hide their mistakes. This might lead to even bigger problems. Therefore, we should build a culture where mistakes are allowed and where people can talk about their...