[jasonvorhe]

Iirc ISO 27001 requires you're physically incapable of shipping untested code to production. Since they did just that (and they would've easily discovered this if they had tested it) I'd be surprised if this had no consequences for them.

Crowdstrike claims to be certified: https://www.crowdstrike.com/why-crowdstrike/crowdstrike-comp...