In this episode, we explore the framework of what to secure when starting out a security program, or looking to mature it. Starting with the perimeter helps build a defensible position for you to get a foothold on security by knowing what needs to be protected and how attackers might try to access it. Next, we talk about securing the people aspect, building on awareness from the perimeter phase. People are the ones doing the work and who need access to data to do their jobs, one way or another. Training them to handle it correctly is the first half. The next half, is putting policies in place to actively educate and secure the practices the everyday team engages in. Lastly, we briefly touch upon the product, a few ways the FTC suggests securing applications and product which you can read more about here https://www.ftc.gov/business-guidance/resources/app-developers-start-security.

Disclaimer: View are my own and do not reflect that of my employers, acquaintances or family. | Credit: Audio is from bensound.com