Bootstrapping Security
summary
Bootstrapped fintech describes concrete steps: make security part of every job description, require a one-page RFC time-boxed to under two hours, run continual phishing drills (used FishMeFree), and deploy a small stack of free/freemium tools — Snyk, SonarQube, ClamAV, Sentry, AWS Security Hub and GuardDuty, Trend Micro via AWS Marketplace, plus an DNS query logger (GitHub) and Algo VPN. Initial cost claim is <$5,000 first year for under ten employees and ten machines.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 2:35Job Descriptions
- 9:21Education
- 12:09Automatic Detection
- 17:22Other Tools
- 20:04Cost Savings Techniques
- 21:58Sample Costs for Perspective
related talks
33mSecurity on a Shoestring: A Low-Budget Security Revival Tour (Jared Casner)
31mStartup Security, 2nd Edition
30mEffective security on a tight budget
40mImplementing security from day one at a fintech startup
48mSecurity from zero
24mConcrete Steps to Create a Security Culture
52mContinuous Security
58mBalancing Security and Agility While Scaling Your Company