I think the nature of your startup also plays a role with it. Many SaaS propositions do not even target the "enterprise" customer and never have to deal with CI

I think the nature of your startup also plays a role with it. Many SaaS propositions do not even target the "enterprise" customer and never have to deal with CIOs and CISOs. What is the nature of your startup that you want to (commendable in my opinion) immediately address these features?