Re: Lies, damn lies and FOI
You know that there is something called operational risk, in addition to the security risk.
Your box can be firewalled to death or completely cut off from the network, it won't help you if something f**ks up with the OS or the DB and you are left on the mercy of "best effort" support by MS.
What irks me the most is that such systems are dubbed "critical" so can't be migrated, yet there are rarely provisions for what happens if they just die one day.
Biting the hand that feeds IT
