The Minimum Viable Standard for Security

A lot of times we find that even in the bigger companies, the risk tolerance and the budget don't align properly. Me, what I'd like to see is smaller businesses getting to a place where they don't have to worry so much about sort of drive by like non targeted attacks. See them in a better spot to protect against that. It's probably also true that many folks haven't really thought about what their risk tolerance actually is or don't know how to measure it.