Onboard a new engineer
Laptop, access, first commit and security training in week one.
- Ship the laptop with disk encryption on
- Create accounts with single sign on
- Grant access by role, not by copying someone else. Most people forget this: Copying another person's access gives the new starter far too much
- Run security and privacy training
- Set up the dev environment with a buddy
- Ship a small change to production
- Check in at 30 days (Engineering manager signs off)