Insights

You have just closed your term sheet. The champagne is barely flat when the investor’s due diligence checklist arrives. Somewhere around question fourteen, it asks about your information security framework. You check with your CTO. The honest answer is a shared Google Drive, a password manager you adopted six months ago, and a vague intention to “do something about security” next quarter.