The following document was created by an CISO investor, without input from the company