DrupalCon New Orleans 2016: Simplifying Security: Protecting your Clients and your Company

This talk explores how agencies can engage in meaningful security conversations with their clients to assess risks effectively. The speaker discusses critical security questions that should be asked during the discovery phase, addressing common myths such as the misconception that smaller organizations are not targets for cyber threats. The session covers various security layers, including the platform stack, backend applications, front-end technologies, and organizational practices, while emphasizing the importance of proper encryption and key management. Additionally, the talk highlights the benefits of implementing robust security measures, such as winning more requests for proposals and reducing exposure to sensitive client data, supported by case studies from diverse clientele like small businesses and educational institutions.