>Blocking Iranian IPs, as opposed to accounts, is almost certainly over-compliance.
Very easy to set a geo blocker or conditional access policy and have full compliance. Exempting unique IP addresses becomes annoying, but if needed possible.
It also cuts down on the other side of the house of security related incidents, which, if your company offers a product interested by people in that state, or, has news that can be taken in a dim light, prevents ddos and other annoying things.
Not perfect, but one reason why there's 'over compliance'.
> It does not speak well of the United States justice system if someone could be prosecuted for failure to block Iranian IPs. If this were required, the law should be clear. Otherwise, the US citizens deserve not to be in fear of prosecution.
Cheap insurance, especially if you have no intentions of doing business from there.
Very easy to set a geo blocker or conditional access policy and have full compliance. Exempting unique IP addresses becomes annoying, but if needed possible.
It also cuts down on the other side of the house of security related incidents, which, if your company offers a product interested by people in that state, or, has news that can be taken in a dim light, prevents ddos and other annoying things.
Not perfect, but one reason why there's 'over compliance'.
> It does not speak well of the United States justice system if someone could be prosecuted for failure to block Iranian IPs. If this were required, the law should be clear. Otherwise, the US citizens deserve not to be in fear of prosecution.
Cheap insurance, especially if you have no intentions of doing business from there.