Compliance circus stories from the enterprise world – happened today: 1. A coworker could not access his VPN credentials because the password manager where they are stored is only reachable via VPN. 2. Another coworker knows that security issues have been found in his code but he cannot fix them. He did not receive the full vulnerability report (with reproduction details) from the auditor since 25 days because the auditor wasn‘t able to share the report in an approved and compliant way yet.