Insights
Notes on how much security is enough.
Essays, research and field notes on security strategy for B2B SaaS companies that have outgrown letting the audit set the bar.
-
Your security program is built for a company you no longer are
Every security program moves through three stages. The first one is correct. Most companies stay in it years past the point it stopped being correct, and nothing about the program itself tells them.
Read