When the startup gives their one #infosec employee that acts as a CISO, IT, AppSec, and GRC, the SOC 2, ISO 27001, HIPAA, and HITRUST audits. pic.twitter.com/lh5e5lYFw0

— Will Gregorian (@WillGregorian) April 22, 2022

I am this employee for two different companies. It is not fun.