A 10-person SaaS startup
Imagine a software team that has grown from one founder’s laptop. Accounts were opened by whoever needed them first, passwords are shared in chat, nobody is sure who has admin rights, and a customer has started asking how company data is protected.
How we would approach it
- List every account, who owns it and who can administer it, then make sure each has two admins
- Move email to the company domain with multi-factor authentication
- Replace shared passwords with a team password manager
- Encrypt laptops and switch on updates and screen lock
- Back up source code and cloud data, and test a restore
- Write a one-page note of how everything is set up, so customer questions have a ready answer
What the team would have afterwards
Every account has an ownerNo shared passwordsA restore that has been tested