Lady B RCX retweetledi

We have a strict zero-trust policy for local admin rights.
A graphic designer requested elevation to install a custom font called "Bebas Neue".
I replied with the standard Vendor Risk Assessment questionnaire.
It's a 40-page Excel document.
He asked if this was a joke. He just needs a font for a PDF.
I told him all third-party code requires a security audit, a data privacy impact assessment, and VP approval.
He said the font is open-source and free.
I explained that "free" means we need legal to review the licensing agreement.
He asked how long that takes.
I said anywhere from four to six months.
He sat in silence for a minute.
He replied, "I'll just use Arial."
I closed the ticket as "Alternative Solution Accepted."
I love Arial.
English







