I have a Hasselblad 500 and I like to fill the whole frame with interesting architecture at odd angles. 1920s and 30s art deco is especially good to photograph.

yeah. That kind of money is top 5% of homes in most of Europe outside very wealthy areas and districts like Zurich. In the UK the average house price is about £300k ($400k)

yes so you’re agreeing with me

Yup, but you have to think “how would malicious software/spyware/whatever get in our source code and if it does, how would we detect it?”

that’s where ISO and SOC II add value and give some assurance that detective, preventative and corrective controls exist and are working to prevent an issue.

If the company maliciously inserts back doors into closed source code and sells it like that, no amount of external audit is going to defend against that because they’ll just hide the code from the auditors.

the closest you’ll get is probably SOC II Type 2 or ISO 27001. While nowhere near perfect, those certifications validate that organisational controls such as change management, employee background screening, SDLC and production access controls functioned over the past 12 months. An external audit by an accredited specialist is required to obtain those certifications.

hundreds and hundreds of hours squashing people with the Manta

for now