• 30 Posts
  • 827 Comments
Joined 1 year ago
cake
Cake day: August 15th, 2023

help-circle













  • remotelove@lemmy.caMto196@lemmy.blahaj.zoneWendy Carlos rule
    link
    fedilink
    arrow-up
    23
    ·
    edit-2
    4 days ago

    Synth sims are the cheap way to go. Cardinal is an open source fork of VCV Rack. It can be used standalone or as a plugin with your favorite DAW.

    https://cardinal.kx.studio/

    All the concepts are the same as modular “euro rack” synths. Voltage lines, oscillators, the works. You even use “wires” to connect everything.

    All YouTube tutorials for VCV are generally applicable to Cardinal, btw.

    If you want to go the DAW route, it should work with the free version of FL Studio. It’s just much easier to do full tracks that way. However: FL Studio is not easy to learn and even less so when you are integrating something like Cardinal.

    Edit: I apologize in advance if this post is the reason you fall into the money pit that is digital music.






  • It gets worse. Tech companies are service providers that typically work with a chain of other service providers. About 40%-50% of the controls for the last SOC2 audit I ran was carved out and deferred to our service providers. (Also, there are limited applicable frameworks: SOC2, PCI, ISO-270001, HIPAA and HITRUST are common for me, but usually related to cloud services.)

    Yeah, I tend to break the brains of auditors that have never dealt with startups and have been used to Fortune 500 mega-companies. What’s funnier, is that I am just a lowly security engineer. A very experienced security engineer, but a lowly one nonetheless.

    Auditor: So what is your documented process for this ?

    Me: Uhh, we don’t have one?

    Auditor: What about when X or Y catastrophic issue happens?

    Me: Anyone just pushes this button and activates that widget.

    Auditor: Ok. Uh. Is that process documented?

    Me: Nope. We probably do it about 2-3 times a week anyway.



  • You aren’t wrong about my description. My direct experience with compliance is limited to small/medium tech companies where IT is the business. As long as there is an alternate work location and tech redundancy, the business can chug along as usual. (Data centers are becoming more rare so cloud redundancy is more important than ever.) Of course, there is still quite a bit that needs to be done depending on the type of emergency, as you described: It’s just all IT, customer and partner centric.

    Unfortunately, that does make compliance an IT function because a majority of the company is in some IT engineering function, less sales and marketing.

    I can’t speak to companies in different industries whereas you can. When physical products and manufacturing is at stake, that is way out of scope with what I could deal with.