Sharp reframe. ERR is segregation of duties applied to infrastructure: the model fails whenever one credential set can both run production and delete the recovery path, the same control gap auditors flag when one person can both initiate and approve a wire transfer. Storage immutability without management-plane isolation only holds until someone with legitimate access decides to misuse it. My prediction: cyber insurers make this an underwriting question before regulators make it a mandate.
Sharp reframe. ERR is segregation of duties applied to infrastructure: the model fails whenever one credential set can both run production and delete the recovery path, the same control gap auditors flag when one person can both initiate and approve a wire transfer. Storage immutability without management-plane isolation only holds until someone with legitimate access decides to misuse it. My prediction: cyber insurers make this an underwriting question before regulators make it a mandate.