For a more checklist oriented approach you might also find this other list helpful. It is a reminder of all measures you could take, at a higher level, about t

For a more checklist oriented approach you might also find this other list helpful. It is a reminder of all measures you could take, at a higher level, about technical as well as cultural things you need to do about security. https://cto-security-checklist.sqreen.io/ https://cto-security-checklist.sqreen.io/ Full disclosure: I worked on it (feel free to send me feedback)