Tbf, I’ve found it’s a good sign when an org goes through this pain early on - less chance for tech debt to pile up. Most of my employment has been in the secu

Tbf, I’ve found it’s a good sign when an org goes through this pain early on - less chance for tech debt to pile up. Most of my employment has been in the security auditing/testing space, and the difference between “bolting it on later” and “building it in from the start” is incredible from both a purely technical and a process standpoint.