Manage Your Company Risk (Security Tutorial)

About this video

A solo security tutorial in which Dan Martell lists five ways team members and developers put a SaaS company at risk. First, missing agreements: anyone who touches code or data needs a signed agreement covering IP ownership, because buyers and investors will audit them at exit or funding. He recounts his Flowtown experience, where a business development contact held 1% equity assigned only over email — dead equity he had to fly out and negotiate back before a funding round could close — and warns founders he has seen far larger stray stakes. Second, letting contractors work on their own servers and files: all code, designs and copy should live in company-owned GitHub, Dropbox and Drive accounts so a departure cannot hold the business to ransom. Third, not collecting logins: founders should inventory every system, store credentials in a tool such as LastPass or 1Password, test and reset passwords, and keep the admin login themselves. Fourth, third-party app access: staff signing into new tools with their corporate Google or Microsoft login can silently grant access to contacts, email and CRM data, so teams need training and two-factor authentication. Fifth, weak authentication: reused passwords and unprotected phones expose email, banking, domains and DNS, so strong unique passwords managed in a password tool plus two-factor authentication are presented as mandatory.

Key takeaways

• Get a signed IP/ownership agreement from everyone who touches the product or data — before funding or exit diligence finds the gap
• Never let contractors build on their own servers or accounts; keep source files inside company-owned systems from day one
• Centralise all logins in a password manager, verify and reset them, and retain the admin credentials yourself
• Train the team that logging into third-party apps with a work account can hand that app your CRM, contacts and email data
• Require strong unique passwords and two-factor authentication across the company, including on phones

Episode details: published February 27, 2023 · 11:10 long. Summary written by Self Growth Videos from the episode itself. Business results and any income figures mentioned are Dan Martell’s own claims, shared for education — they are not typical or guaranteed.

← Previous: Hiring a Lawyer For Your Business · Next: 5 Steps to Be More Productive →

All Dan Martell videos · Dan Martell profile · Dan Martell (official site)