Had an excellent discussion with another CISO on what companies actually need (or have the capacity for), especially when first starting out. For example, you want to go towards SOC2 compliance. You’re the CEO or CTO of a company and buy a tool out there, of which there are plenty, that will help outline for your organization all the necessary steps you need to take to be compliant.