How should we control access to user data?

At some point in a startup’s lifecycle, they decide that theyneed to be ready to go public in 18 months, and a flurry of IPO-readinessactivity kicks off.This strategy focuses on a company working on IPO readiness,which has identified a gap in their internal controls for managingaccess to their users’ data. It’s a company that wants to meaningfullyimprove their security posture around user data access, but which hashad a number of failed security initiatives over the years.

Most of those i...