To those who work at small businesses (<150 people)/startups/etc., what does your security function/resourcing look like?

How many people do you have? What kinds of roles are there? What do you keep in-house vs. outsourcing?

While not all businesses are created the same, and not all have the same risk appetite, I want to get a feel for what's common at smaller companies. Maybe you have 1 person doing everything. Maybe you have 3 or 5 or whatever. I come from larger organizations but I am starting at a small company soon and I want better …

businesses cybersecurity etc function house outsourcing people risk roles security small businesses startups work