Frank Kim and Mike discuss when and how smaller companies should build a security program and hire dedicated security people. They also talk about how to decide the appropriate level of security tooling for a company.