The Security Labs team at Tugboat Logic is comprised of ex-auditors and security analysts. They guide customers through any and all security and compliance-related questions, and at times provide hands-on help when needed. Chika Nwajagu, Senior Security Analyst, is the tireless badass of the Tugboat Security Labs team (fun fact: she's the first and founding member). Since her first day at Tugboat, Chika has demystified security and tamed compliance for our customers. To say Chika knows security and compliance is an understatement: she has over a decade of experience in IT and security, having started her career in technical support and then moving on to the enterprise security and audit teams at the two largest banks in Nigeria. When she’s not helping customers and thinking about all the security, she’s drinking fine wine, enjoying a good read, and no longer driving in four hours of one-way traffic just to get to work. Hear about how she got into the world of IT, security, and audits, and learn from her the security best practices all orgs should do.

Despite all the tools and consultants out there to help you get SOC 2, the SOC 2 certification process is still murky at best. Everyone seems to have an opinion on how fast you can get your SOC 2 and how much it should cost. And Google searches can't help you wade through all that, let alone give you the straight answers you want. That's where Danny Chen, twice-exited entrepreneur (Walmart and Amazon) and founder and CEO of a VR start-up is will set you straight. He did his due diligence in evaluating many tools (one of which was Tugboat Logic) to see which one would best prep him for SOC 2, and shares what he's learned so far in his SOC 2 journey. Here are his learnings.

One of the more important security controls in any organization's security program is access controls, especially when it comes to your infrastructure. But given that most organizations lack both complete visibility into and control of their cloud infrastructure, it's hard for security and operations teams to figure out what actions are being performed by which users, leaving them wide open to accidental or intentional privilege misuse. Having seen this problem firsthand, CloudKnox Founder and CEO Balaji Parimi drew upon his decades of experience and research to create the CloudKnox platform. Here are the best practices he recommends for managing access controls.

Kubernetes, containers, and serverless have been part of the "new stack" that everyone talks about, but hasn't quite yet fully harnessed. And, security best practices for these are still being formulated. That's where Lacework's CEO Dan Hubbard is looking to change all of that through Lacework's end-to-end security and compliance platform for multicloud and new stack environments. Dan is a security and tech OG, and a font of security knowledge. Here are the best practices he recommends for securing the "new stack."

For the past 20 years, Tugboat Logic's VP of Engineering Scott Sturgeon has built and scaled security programs from scratch at both start-ups and large enterprises (i.e. he's seen a lot lol). He'll teach you how to clear some of the most common security hurdles at start-ups, ranging from why you need to think about security from Day 1 to how to figure out what kind of security options are the most important and most cost-effective when you're starting out.