✓ Accepted Answer
Honest take, because I wish someone had told me this earlier.
Everything you will read about security will make it sound more complicated than it is. Here is what 5 years of working with council has actually taught me.
The most common trap is spending too long on research instead of doing.
What actually moved the needle for me: I stopped trying to understand everything before starting, and just committed to treating every mistake as data rather than failure. After that, things started moving much faster.
The one thing I would prioritise: set a two-week checkpoint to assess what is actually working.
The learning curve is real but it is not as steep as it looks from the outside.
by rupertedwards28118