Today we revisit a series we haven't touched in a long time all about eating the security dog food. TLDL about this series is I often find myself preaching security best practices, but don't always follow them as a consultancy. So today we talk about:

• How the internal 7MS infosec policy development is coming along
• Why I'm no longer going to be "product agnostic" going forward
• Some first impressions of a new tool I'm trying called ITGlue (not a sponsor)
• How to start building a critical asset list - and how it shouldn't overlook things like domain names and LetsEncrypt certs

Also, don't forget we are doing weekly livestreams on security topics!