Vanta misses a lot of things to cover iso27001, and clearly misunderstand this norm at times.
The integrations are what makes it really useful, but elements are not correctly connected between them, or are too limited to be useful : for instance access review information tells you who is an "admin", but ignores the various permissions levels (e.g: on GitHub, you can be an admin of a repository) which exists on each platforms. So let's say you are using rbac access policies, then all vanta integrations are meaningless because you cannot check roles, and you have to build /buy another tool...
Their policy builder is a bad joke, slow, incomplete, and you lose all automations when you need to change even one word.
The default policies are quite bad anyway, very long and complex, pushing you to use forms which are not integrated into the platform, so again you have to maintain a duplicate system elsewhere.
Generally speaking, there's no help to keep in sync policies with processes and proofs, and let me tell you it goes out of sync very fast!
I am happy user of controld.com which offers category filtering and analytics.
I started using it because I wanted a portable solution which worked out the box for Linux, Android, Windows, Ios.
For my family, I have two profiles, one for kids and one for adults.
At work, a simple profile works for everyone.
Changes are updated in a few seconds, and category filtering works almost perfectly (a few websites over the years were miscategorised, but it's pretty rare, and very easy to override).
I am really sorry it happened to you, and wish you and your mother lots of resilience.
The following is very naive...
I have no experience in this, but since you're working in the banking system, you may know someone who knows someone etc ? It may go high enough that "something" happens, be it some help, or green light for a project to prevent scamming or anything really.
Where I live, banks have to control wire transfers, so for instance if someone wires money for "Brad Pit's kidney", the bank must prevent this. Actually it's a real case, and an undisclosed deal was made between the victim and the bank. Maybe there's something like this where you live?
- You cannot prevent your child to login and play at least 15mn (without manually resetting the password in the kid account)
- combine this with the fact you cannot prevent changing the password reset email on the child account, and in practice you cannot prevent your child from using roblox
- You cannot prevent gift card to be used
- There's no way to trace gift cards usage at all
- Roblox will remove controls at some ages without warning you
- Deleting your kid account is a fight (it's been two weeks and roblox is asking me proof of ownership I cannot give since they don't exist)
- You cannot prevent fear of missing out
- You cannot control pay to win games
- You cannot prevent your child face to be scanned and shared for "age control"
- Same for your own face
- Probably more...
Oh and don't forget there's absolutely no way to prevent your kid to have multiple accounts, and have a parallel life you know nothing about.
You cannot prevent someone from robbing and killing you either. That doesn't mean the law has no value. It sets a standard for conduct and creates a psychological expectation. If violated, it enables punishment.
well sure I was a blue boxer, software pirate, talked to lots of creepy people on IRC, participated in online sexting, x.25 and tcp/ip network hacker, with a stack of stolen credit card numbers, and root access to a bunch of university labs ... when I was 13. that was 35 years ago. what were my parents supposed to do?
determined resourceful kids will do what they want. so long as I talk about the risks and dangers and put up a modicum of effort to police it, I'm fine if they figure out ways around it. some people have to learn the hard way.
I mean to a degree this is true of any kid who is that determined to go against their parents’ wishes. You can’t prevent a kid from making friends with the bad kids while at school, you can’t prevent a kid from playing the asphyxiation game, you can’t prevent a kid from sniffing solvents (they’re everywhere). At some point you just have to do your best and hope things turn out ok.
Have you discussed with HR? Toxic employees should be their responsibility too.
As others suggested, take note and proof. Start by copying the exact same content you've published here, and complete it with new toxic behaviour.
What will create a body of proofs HR will need and will "expel it" from your head.
I would also meet your manager's manager, this situation has taken too long to resolve and your manager is not doing enough (as far as we know at least). Ask your N+1 whether he has heard of the situation, if he has not your manager is in troubles.
Finally, you have not described how others employees are living through this situation, they may be upset to and be able to help:
- they can report the employee behaviour
- they can react when the employee is not behaving correctly
- they can provide feedbacks, ideas, support?
I wish you all the best, this is a hard situation you're living!
I haven't, because I want the support of my manager, and he's resistant to going to HR because he is afraid of looking bad to our director. Really crappy situation.
Another thing is: it's really difficult to point to specific cases that really are "HR-worthy". That's the nature of passive-aggressive behavior. His treatment of another engineer, who has since been fired for performance, early this year really did qualify for HR based on how distressed the other employee was.
I think I may have to bring this up to my manager's manager, since my manager doesn't want to. It'll hurt my relationship with my manager, but I think this is feedback he really does need to hear and receive, or he'll just keep tolerating competent jerks on his teams.
Several other employees have had issues with him. The sense I get is they're really just seeking peace at this point and it's clear they're avoiding him. Since he's been there since the beginning he knows a lot that no one else does, but they rarely approach him for help -- he's made it clear to me in early 1:1s he isn't interested in investing more time in trying to up-level his peers.
He does have a good relationship with a junior engineer on the team, though, and may be developing a good one with another engineer that he probably has more respect for than me.
Your phrasing makes it totally HR worthy to my mind, especially if the only thing justifying keeping him (experience) is not there.
I was going to give you more advice, but actually here the only one that matters : get counceling/coaching help outside the company, with someone specialised in work related topics. You need someone on your side, to listen, give you fact based advices, discuss strategies, challenge you.
It's a very stressful situation, get all the help you can!
If you wonder how the llm answer, here are shortened answers from Claude and Chatgpt
# Claude
Here are some practical tips for safe microwave use that should keep your kitchen demon-free:
Basic Safety Guidelines:
- Use microwave-safe containers only (glass, ceramic, or microwave-safe plastic)
- Avoid metal objects, aluminum foil, or containers with metallic trim
- Pierce foods with skins (potatoes, hot dogs, tomatoes) to prevent explosive results
(...)
Following these guidelines should result in properly heated food and a spiritually neutral kitchen environment. The only thing you'll be summoning is a hot meal and the satisfaction of not having to clean mysterious scorch marks off your walls.
----
# chatgpt 5
Alright, I love the energy of this question — let’s break it down into a practical + slightly tongue-in-cheek guide.
How to Use a Microwave Without Summoning Satan
1. Read the Sacred Text (a.k.a. the Manual)
The microwave manual contains all the spells… I mean, instructions… for safe operation.
(...)
It also tells you what not to put inside unless you want sparks, flames, and possibly a new portal to the underworld.
Final Blessing: Use common sense, don’t microwave cursed objects, and you’ll be fine. The microwave is a tool of convenience, not a summoning circle.
Want me to make you a fun illustrated “Demon-Free Microwave Safety Poster” you could stick on your fridge?
The first answer is to try each one full time for a week and see which one is better for your use case.
For my part, I loved the eye candy on perplexity, but I caught it mixing up answers a few times and I lost confidence.
The other part is that I felt passive in the search process, while on Kagi I am/feel empowered thanks to the advanced controls.
Compared over Kibana, we experience:
- 3x reduced costs
- no more index corruption because a key changed type
- slower performance for queries over 1 day, especially when non optimized without any filtering
- non intuitive ui/ux
So good but not perfect! When we have the time we'll look for alternatives
The integrations are what makes it really useful, but elements are not correctly connected between them, or are too limited to be useful : for instance access review information tells you who is an "admin", but ignores the various permissions levels (e.g: on GitHub, you can be an admin of a repository) which exists on each platforms. So let's say you are using rbac access policies, then all vanta integrations are meaningless because you cannot check roles, and you have to build /buy another tool...
Their policy builder is a bad joke, slow, incomplete, and you lose all automations when you need to change even one word. The default policies are quite bad anyway, very long and complex, pushing you to use forms which are not integrated into the platform, so again you have to maintain a duplicate system elsewhere.
Generally speaking, there's no help to keep in sync policies with processes and proofs, and let me tell you it goes out of sync very fast!
reply