I was expecting a fairly meh-level post - but this one has a lot of clear simple guidance - not even for data rooms - but as a base level of controls needed for (any?) business.

Worth a read.

(And given I have just come up with my next-sure-to-be-the-one biz idea, I should build something like this. Ah. optimism. I have missed you)