diff --git a/README.md b/README.md
index 9ac2cd8..4d1eed1 100644
--- a/README.md
+++ b/README.md
@@ -198,6 +198,7 @@ A curated list of awesome cloud security related resources.
 2. [CSA cloud security guidance v4](https://cloudsecurityalliance.org/artifacts/security-guidance-v4/)
 3. [Appsecco provides training](https://github.com/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)
 4. [Cloud Risk Encyclopedia by Orca Security](https://orca.security/resources/cloud-risk-encyclopedia/): 900+ documented cloud security risks, with ability to filter by cloud vendor, compliance framework, risk category, and criticality.
+5. [SecOps Bit By Bit: Roadmap for First-Time CTOs and Startup Founders](https://leanpub.com/secops-bit-by-bit): This book is a compilation of best practices for evaluating weak spots in a product and company, and fostering a robust security culture.
 
 # Free Courses
 1. [AWS Security](https://www.youtube.com/playlist?list=PL0-xwzAwzllw_dvNfabV28-bpAEoMchd3)