Those in IT will know that a lot of start-ups go for the lower bidder/lower cost/minimum required in terms of security/compliance beause at first they are not making money so IT security is just a cost centre. Only after they get bigger and profitable then they start thinking seriously about their IT security department
When I look at the commission free brokers, I want to know whether they are actually profitable and how they make their money. If they are not making enough money, how are they paying for cost centres like IT security and are they just paying for the bare minimum, for example? If they bother to pay for IT security audit, do they just remediate the critical vulnerabilities and everything else, like areas for improvement, they don't care because they are only required to fix critical issues
