The security obligations of a five-person software startup and a multinational technology company can overlap, but the tools each needs to manage them don’t necessarily