I wrote a blog post about going rogue with Xojo last month, but I thought I would solicit some more stories from people here.
Feel free to share stuff with me privately (paul@xojo.com), if you’d rather not share here.
In some companies (such as the one I work for). “Going Rogue” will get your fired in an instant, regardless of your intentions.
[off record]
Happy we have some amount of protection as an employee in The Netherlands. To fire someone for such a ridicule reason isn’t possible… Only theft, assault and improper sexual behaviour (among things) can get you fired instantly. I don’t think the use of Xojo falls in that category…
It is not a ridicouls reason…
We are an IT company… and every lick of code regardless of if for “adhoc” reasons, or production products must be accounted for documented and be produced by company specified tools.
Downloading software of any kind (including Xojo) from an external source is strictly prohibited, as we are strictly monitored by the SarbanesOxley (SOX) audit criteria. Not all US companies that have IT departments that have to meet this criteria, but we do.
So… Xojo is not your workhorse I presume?
[quote=78456:@Dave S]Downloading software of any kind (including Xojo) from an external source is strictly prohibited, as we are strictly monitored by the SarbanesOxley (SOX) audit criteria. Not all US companies that have IT departments that have to meet this criteria, but we do.
[/quote]
Which SOX title covers software usage? Just curious is all. No need to reply if it’s wasting your time.
I have been doing my whole carrer!
When I worked for a company with an IT group, everything they produced for us was pain to use… so I rewrote it from a user’s perspective… that then started coding a bunch of other things that made life easier for the people in my department that would never have been done by the IT (too expensive and it would have taken too long for then to understand exactly what was needed)
[quote=78466:@Karen Atkocius]I have been doing my whole carrer!
When I worked for a company with an IT group, everything they produced for us was pain to use… so I rewrote it from a user’s perspective… that then started coding a bunch of other things that made life easier for the people in my department that would never have been done by the IT (too expensive and it would have taken too long for then to understand exactly what was needed)[/quote]
Well not with Xojo… that just started about 12 years ago.
Don’t know… That comes under our legal department… I just do (or don’t do) as I’m told 
But I do know that if a SOX audit is performed, we have to trace back to thru the code, the developers, and the tools including purchase and license information if so requested.
[quote=78469:@Dave S]
But I do know that if a SOX audit is performed, we have to trace back to thru the code, the developers, and the tools including purchase and license information if so requested.[/quote]
Under SOX ? Really ?
It’s been a long time but my recollection of SOX had to do with financial audit & controls and not software audits
Unless maybe the software is finance related like accounting payroll etc ?
Or the software has to do with the adminstration of Health Care benefits (adjutication of Claims etc)
that is very common, especially as the size of the company grows.
it probably isnt SOX says no Xojo but SOX requires you to setup what/who/when/how is allowed and vice versa. Then log/document everything. As most Southern (USA) boys, I go by my middle name. When my last company was hit with SOX, I could no longer go by that on any reports/logins/authenications/phonebook/etc. I had to go by my (unknown to anyone but my family) legal first name. SOX required it. As for tools we could use. I could not use Xojo in house as it was not an authorized tool. And using unauthorized tools was not only a vilotion of the company rules but many of our certifications (including SOX).
remember SOX is not SOX is not SOX. Every market has their own tweaked version of it. Financials were the worst hit.
and dont get me started on PCI (vs PCI vs PCI vs PCI)
Did not know that also fell under Sarbanes Oxley in the US
SOX is all about linking person to an action (money or otherwise). I had some really bad SOX experiences working for the Financial Market. Moved to Internet Market and SOX has totally different rules. or it seems to be.
Scott… that is exactly right.
However, unlike you (at least so far) they have not forced me to use my first name (as I too go by my middle name).
And Health Claims ajudication is a FINANCIAL matter if you think about it …
as soon as you mention those two words you have HIPPA and different versions of PCI (if you are doing HC payment info) and SOX.
once you start adding the various 3-5 letter certs to your company (SOX, PCI, HIPPA, etc) the worse it gets.
[quote=78489:@Dave S]Scott… that is exactly right.
However, unlike you (at least so far) they have not forced me to use my first name (as I too go by my middle name).
And Health Claims ajudication is a FINANCIAL matter if you think about it …[/quote]
I wasnt speaking about your situation directly (dont know the details) but yeah I began to hate working in the Financial Market due to all the idiotic rules around the certs. When adding the certs together, their rules are greater than the sum of the parts. And most of them are knee ■■■■ reactions to someone doing something stupid/wrong.
SOX was a reaction to the Enron typo scandals early in the 2000’s
I’m in Canada so we escaped most of that since our financial services regulation was already much more stringent than the US.
And it continues to be so.
The effects from 2008 were radically different here EXCEPT that we’re right next door so your economic woes affect use very directly as we’re still a huge trading partner
That’s what you get for being America’s hat. Just kidding!