Security Evidence Insights

Practical notes on collecting, explaining and maintaining security evidence that is useful to customers and defensible for small teams.