<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Governance on takebakker.dev</title><link>https://takebakker.nl/tags/governance/</link><description>Recent content in Governance on takebakker.dev</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>© 2026 Take Bakker</copyright><lastBuildDate>Sun, 11 Oct 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://takebakker.nl/tags/governance/index.xml" rel="self" type="application/rss+xml"/><item><title>Reference: Problem Post</title><link>https://takebakker.nl/drafts/reference-problem-post/</link><pubDate>Sun, 11 Oct 2026 00:00:00 +0000</pubDate><guid>https://takebakker.nl/drafts/reference-problem-post/</guid><description>&lt;p&gt;We had a policy assignment that looked fine in the portal. Compliance showed 98%. The remaining 2% was a handful of&#10;resources flagged for missing tags — known, accepted, moving to remediation next sprint. Nothing alarming.&lt;/p&gt;&#10;&lt;p&gt;Then someone asked why a storage account deployed three weeks ago was still publicly accessible. It wasn&amp;rsquo;t in the&#10;non-compliant list. The policy was supposed to deny it.&lt;/p&gt;&#10;&lt;p&gt;It took a while to figure out why.&lt;/p&gt;</description></item></channel></rss>