SaaS CTO Security Checklist

Post by NullPrefix » Thu, May 30, 2019, 8:41 PM UTC

Post by the_watcher » Thu, May 30, 2019, 8:49 PM UTC

NullPrefix wrote: post #2

Don't know if the post author is the one who submitted it here, if so, it would be way nicer to read the list if items within each category (employees, code, ..) would be sorted by timeline (seed, series a, series b+).

Post by Macha » Thu, May 30, 2019, 8:59 PM UTC

paulb81 wrote: post #5

NullPrefix wrote: post #2

Don't know if the post author is the one who submitted it here, if so, it would be way nicer to read the list if items within each category (employees, code, ..) would be sorted by timeline (seed, series a, series b+).

Thanks for the feedback! That makes complete sense. We are going to update that

Post by SmokeGS » Thu, May 30, 2019, 9:03 PM UTC

Eldt wrote: post #7

"At Sqreen, for example, if someone catches another person’s laptop unlocked while they’re AFK, they can type “Cookies!” in that person’s Slack. That person will then have to bring in cookies for the office!" This sounds like a fun idea, but has anyone ever refused to bring in cookies?

Post by paulb81 » Thu, May 30, 2019, 9:05 PM UTC

Macha wrote: post #6

paulb81 wrote: post #5

Earlier quoted context omitted.

Thanks for the feedback! That makes complete sense. We are going to update that

While you're at it, "Monitor your user's computers" appears twice. The first time under your users appears to be correct, but the second occurence has a description about how lets encrypt is a free, easy to use option. I'm guessing the second heading should be "Use encryption on all your web sites and APIs" or similar?