it security for early-stage companies