CTO Security Checklist