Security growth with business

Depending on the business's development status, the needs and implementation of security may be subject to the business's objectives and environment. A start-up company may leverage external cloud services and out-of-the-box security services to protect services and data. A multi-million dollar cloud service company may self-build and customize security services based on its own business needs, and even share the security technology, making it open source. Let's discuss how business growth in different stages may be related to the scope of security practices. 

Stage 1 – basic security control 

In this stage, we may be dealing with a start-up company. No dedicated security team is part of the IT team. Most security controls are adopted from cloud services, such as AWS.

Although the cloud service may provide security services, it's still the user's responsibility to protect the application and data. Therefore, the following are critical for the security assurance...