Most of this is the bare minimum to operate on the internet. has Chris Haarburger ever run a company? Youre incorporated so "early stage" is over; grow up. y

Most of this is the bare minimum to operate on the internet. has Chris Haarburger ever run a company? Youre incorporated so "early stage" is over; grow up. you have investors and you have a legal duty to protect them from risk. IT Security is part of risk managent including the impact and severity of threats and exploits. take some time to educate yourself about what this all means, or do one better and hire an infosec person. you should also have a disaster recovery plan and business continuity plan for things like ransomware attacks and disasters. Be an adult and use a risk management framework communicated to senior leadership and endorsed as part of your operating model. https://csrc.nist.gov/Projects/risk-management/about-rmf https://csrc.nist.gov/Projects/risk-management/about-rmf