https://blogs.damiendye.uk/en/tags/governance/ Recent content in Governance on Damien Dye's Blog Hugo en-GB Fri, 28 Aug 2026 17:00:00 +0100 https://blogs.damiendye.uk/en/random/is-your-msp-lying-to-you-part2/ Fri, 28 Aug 2026 17:00:00 +0100 https://blogs.damiendye.uk/en/random/is-your-msp-lying-to-you-part2/ Part 2 of 3. Cloud for a business all in one building. The firewall brand with the most exploited vulnerabilities on CISA's list. Backups nobody has restored, reports that never reach you, an agent on every machine answering to a console you have never seen. What the ICO found at Advanced and Capita, and the keys that open all of it. https://blogs.damiendye.uk/en/random/is-your-msp-lying-to-you-part3/ Fri, 28 Aug 2026 16:00:00 +0100 https://blogs.damiendye.uk/en/random/is-your-msp-lying-to-you-part3/ Part 3 of 3. What the SLA actually promises, what the liability cap is worth, and what the excuses sound like when it fails: the meeting about an invented crisis, the day it becomes your fault, the account that goes quiet, the advice that costs them money, what leaving really involves, and why nobody regulates the selling. https://blogs.damiendye.uk/en/ceph/who-actually-writes-and-uses-ceph/ Thu, 27 Aug 2026 13:00:00 +0100 https://blogs.damiendye.uk/en/ceph/who-actually-writes-and-uses-ceph/ I counted every commit to Ceph's main branch for the last ten years, traced every maintainer to the company that employs them, and gathered the public deployments. 69,613 commits, 1,718 people, 478 organisations, and a project that has outlived most of the companies that built it. https://blogs.damiendye.uk/en/dns/who-actually-controls-dns/ Tue, 25 Aug 2026 14:00:00 +0100 https://blogs.damiendye.uk/en/dns/who-actually-controls-dns/ The root of the internet is a 1.5 MB text file. Who edits it, who signs it, and what ICANN has done with the power to decide what goes in it. https://blogs.damiendye.uk/en/dns/what-happened-at-nominet/ Tue, 25 Aug 2026 13:00:00 +0100 https://blogs.damiendye.uk/en/dns/what-happened-at-nominet/ The .uk registry is owned by its members. In March 2021 they voted half the board out. This is what the estate looked like from inside, and how a registry with no regulator ended up being disciplined by the only people who could. https://blogs.damiendye.uk/en/random/what-the-record-shows/ Tue, 25 Aug 2026 09:00:00 +0100 https://blogs.damiendye.uk/en/random/what-the-record-shows/ Part 4 of 8. Picking a supplier means guessing how they will behave later, and the fairest guess is what courts and regulators have decided. Findings against the largest tech firms, leaning on European decisions and the cases regulators lost, then the pattern: fines small next to the gain, remedies years late, harms known inside long before out.