How should we control access to user data?

At some point in a startup&rsquo;s lifecycle, they decide that they need to be ready to go public in 18 months, and a flurry of IPO-readiness activity kicks off. This strategy focuses on a company working on IPO readiness, which has identified a gap in internal controls for managing user data access. It&rsquo;s a company that wants to meaningfully improve their security posture around user data…