I agree with this response. I am in the business and the article is dead wrong. A more appropriate statement is that a software monoculture is a dangerous model and companies that don’t practice thorough testing before deployment are dangerous.
“A more appropriate statement is that a software monoculture is a dangerous model and companies that don’t practice thorough testing before deployment are dangerous.”
Agreed. FWIW, we ran CS through our 3rd party risk program prior to signing. We reviewed their SOC 2 Type II, which was exception free, and audited controls around SDLC.
Speaking with our rep, they are making improvements to their SDLC in light of this event, specifically processes around regression testing.