[computably]

You're responding to literally 7 words out of context.

> Jobs with access to/control over millions of people's data should require some kind of genuine software engineering certification

FAANG, Fortune 500, etc., almost universally go out of their way to violate user freedom in pursuit of profit. Regulation is practically the only way to force megacorps to respect users' rights and improve their security, as evidenced by right-to-repair, surveillance/privacy, and so on.

And none of that has anything to do with users' individual rights to create, run, and modify their own software.

(Yes, regulatory capture exists, no, it doesn't mean all regulation is bad.)

[userbinator]

If the megacorps are going in that direction of being strictly regulated, the rest of the industry will follow. It's the general movement of the Overton Window that's the underlying issue.

[subscribed]

No, they won't. No one in their right mind "wants" ISO27001, ISO9001, SOC or multiple PITA certifications.

Companies do that because they want to attract certain kind of customers and have enough spare manpower and money to go through this all year long.

....or they want to hold a very sensitive data that requires *proven* processes, trainings and skills.

My firm has several of these and we have to keep full compliance team and *always* have some auditor on site.

No one does it just because.