A pragmatic security checklist for small platform teams

The minimal set of controls that meaningfully reduce risk without slowing a small engineering team to a crawl.