The scale of security necessities in organizations runs from: - no need for anything but minimal security, perhaps because the business is trying to surf the

The scale of security necessities in organizations runs from: - no need for anything but minimal security, perhaps because the business is trying to surf the margin between their AWS bill and their Google ad revenue. - there is only a need for security in the part of the business that deals with money - some stuff that the users do, they would prefer to maintain integrity but they don't care a lot about confidentiality - the users want reasonable confidentiality, too - everything about the business is money or secrets Where your business is on that scale determines how much you are regulated and how many internal gatekeepers are necessary.