How to Introduce “Enterprise-Grade” Security at a Startup
summary
Practical guidance for the first dedicated security hire at a fast-growing startup on prioritizing work and seeding a security program. Covers adapting enterprise security principles and creating scalable structures and processes that can grow to manage thousands of assets.
AI-written summary · about
chapters (19)
- 0:00Questions a startup might ask...
- 2:22OpSec (and Culture)
- 4:41Password Manager + 2FA
- 6:00(Ongoing) Threat Modeling
- 8:08Who washes your hands?
- 9:21Who should start the team?
- 12:07Compliance
- 14:53Executive Buy-In
- 15:52Vendor Selection
- 19:17Don't forget support!
- 21:25Corporate IT
- 24:47Cloud Infrastructure
- 27:55Corporate Security
- 32:49Platform/Infrastructure Security
- 36:12Security Assurance (GRC)
- 39:24Properties of a Rapidly-Growing Company
- 40:35Different Concerns
- 42:16Budgeting Spreadsheet
- 43:34If you're in this boat, how do you apply this?
related talks
19mSo You’re the First Security Hire
32mI Started My Startup. How Do I Secure It?
31mStartup Security, 2nd Edition
24mConcrete Steps to Create a Security Culture
51mFirst Security Hire: Building a sec...
58mBalancing Security and Agility While Scaling Your Company
03mImplementing security into an organization
51mBuilding Security Champions