So, how many employees do you take before you spend the time to go through an entire risk management framework? Solopreneur? 3 cofounders? First employee? When

So, how many employees do you take before you spend the time to go through an entire risk management framework? Solopreneur? 3 cofounders? First employee? When you get your first funding? When you get your first request for a SOC 2 report? When you get your first pit in your stomach that you have no controls?