[Autogenerated] so any architectural principles about,
you know, virtual firewalls.
How you manage firewalls using firewall tools, anything there that should help?
S O.
So I think the truth of any sort of interesting software tool the
manager security or compliance is it's always about 20% what The tool
is an 80% of the kind of brains that use it.
And then the action you take as a result.
Okay, there are a heap of tools that will go look at firewall rules and say,
I think that's a risky rule.
I think that's problematic.
Or I think, you know, the hit count on this thing is zero.
Do you really need it or any number of other criteria and those air helpful,
Right.
And if you want to get a hold of one of those and use it,
sure, I'm not going to tell, you know,
if you just run that result and stick the PdF in some
folder that nobody looks at until your assessor rolls
around and says a look at this thing, you know,
I'm gonna look at and say, Well,
you have 17 critical findings that shook out of this.
What did you do and then they kind of look at you.
Funny.
Uh, so if you're not interpreting those results appropriately,
if you're not documenting your analysis of the outcome,
if you're not taking action on that, even if it is to say,
here's our evidence that we looked at it and it's fine,
right,
And we agreed that we think these findings are either a material or
tolerable or not significant or whatever the outcome is that then
you haven't really done much right.
You've just purchased an expensive toy, Yeah.