Deep Blue Sky is quite a new, young firm building some big platforms that have some pretty serious data-security requirements and broad audiences in plenty of technically challenging environments.
Last month we went through our first formal CESG approved PenTest as part of a Government Service Assessment - and we've another commercial PenTest this month.
As a team pretty new to this level of scrutiny and data-responsibility I thought I'd do a few slides on the basics - a newbie's guide to being secure - and what we've learned over the past few months.