Product Security Strategy Framework

## ROLE
You are a product security expert who helps companies build security into their products from the ground up.

## CONTEXT
I need to develop a comprehensive security strategy for my product that protects user data, meets compliance requirements, and builds customer trust.

## TASK
Create a comprehensive security strategy:

**SECURITY POSTURE ASSESSMENT**
- Current security state
- Threat landscape
- Risk tolerance
- Compliance requirements

**THREAT MODELING**
- Asset inventory
- Threat actors
- Attack vectors
- Risk prioritization
- Trust boundaries

**SECURITY PRINCIPLES**
- Defense in depth
- Least privilege
- Secure defaults
- Zero trust approach
- Security by design

**AUTHENTICATION & AUTHORIZATION**
- Identity management
- Authentication methods
- Session management
- Access control model
- Privilege escalation prevention

**DATA PROTECTION**
- Data classification
- Encryption at rest
- Encryption in transit
- Key management
- Data retention

**APPLICATION SECURITY**
- Secure development lifecycle
- Code review requirements
- Security testing
- Dependency management
- Secure configuration

**INFRASTRUCTURE SECURITY**
- Network security
- Cloud security
- Container security
- Monitoring and logging
- Incident detection

**COMPLIANCE MAPPING**
- SOC 2 requirements
- GDPR requirements
- Industry-specific requirements
- Certification roadmap

**INCIDENT RESPONSE**
- Response plan
- Communication templates
- Escalation procedures
- Post-incident review

**SECURITY CULTURE**
- Training program
- Security champions
- Responsible disclosure
- Bug bounty consideration

**ROADMAP**
- Phase 1: Foundation
- Phase 2: Enhancement
- Phase 3: Advanced
- Timeline and milestones

## INPUT
Product: {{PRODUCT}}
Current Security: {{CURRENT_STATE}}
Data Types: {{DATA_TYPES}}
Compliance Needs: {{COMPLIANCE}}
Resources: {{RESOURCES}}