Supporting startups and small businesses to pass ISO 27001 and SOC 2 audits the right way.

Remote
Joined September 2007
Beyond Hoodies podcast recording starts again today. It was a great session with Dustin Kluttz, a cybersecurity expert from the US who currently lives and works in China. When the full episode is available on Youtube and Spotify, I'll share the links here as well.
1
46
I need to do very unsexy thing today: asking all my team members to STOP working, to check all servers, services, working devices, etc. to be patches before the work can start again. A life of tech company in 2026?
61
One important impact of #php2shell issue today on my business: I cannot upload my bills to my accountant's task management system. Yes, they use PHP.
2
851
Is it too soon to say: ISO 27001 or SOC 2 won't save you from cyber incident? #php2shell
1,856
I’m no longer confident about direct ROI of exhibiting at a trade fair. For brand awareness still OK. But expecting warm/hot leads? At least in my industry that sounds impossible now. Seems like intimate closed gatherings is something I need to focus on in 2027.
24
Should I accept a stranger's request to connect on LinkedIn based on this message? I'm confused of whether I should feel proud or sad looking at this message.
1
1
53
When you put yourself out there with your product, whether online or in a trade-fair, trust me when I say that there are some people who believe they can do better than you. Leave them be, and ask them to put themselves out there like yourself, and see whose product will be used by paying customers. His or yours. Even when both products are successful in the market, the market is big enough for multiple players. Don't put yourself in a position of stress because of others' comments.
2
65
School photography is a very good business even in the age of AI. Every year I receive 2 buying codes from my children because they had been photographed, individually and together with their classmates. Every year. That's constant ARR.
54
The further you are in your business, the more expert you become in suppressing excitements. In the beginning, you'd feel very happy when you get positive feedback. Come years afterwards, that feedback won't mean anything when they are not end-up paying for the service. I guess being numb in politeness is the key for success 🤣
1
59
People hate receiving follow-up emails. But the same people also forget the follow through what they promised to do. People, make up your mind! You cannot have both!
1
24
Once again @claudeai saves me time and rights before signing a legal document with potential partner in the GCC region.
26
It’s definitely possible to enjoy road trips in Germany without cash (cashless). The past week we have proved that despite some places still requiring cash-only as their payment method, most spots are already accepting debit and credit cards.
38
I just completed a vendor security risk assessment using @3rdcomply It completes all the analysis in about 15 minutes. Then I reviewed and adjusted the outcomes for about 10 minutes. So total 25 minutes of AI + Human work. While it took the vendor 4 days to send all the relevant documents. Am I successfully making TPRM fun? Ah I wish 3rdcomply.com was there when I did the whole work manually a few years ago…
41
Apparently in 2026 someone still still using '123456' as password to protect sensitive national information. And most leaders busy talking about AI-powered cyberattacks? 🤣🤣🤣🤣 theregister.com/security/202…
1
44
Still amazed knowing that some people still stuck in demanding certs like CISSP or CISM to be working on infosec projects. No wonder the same people keep saying that it's difficult to find the right candidates to fill the job openings. They gated the roles with something trivial.
78
Thanking @claudeai to accompany me reviewing a draconian NDA document from someone who would like to partner to distribute @3rdcomply Yes, eventually I will need human lawyer soon, but for now I'm happy with @claudeai as reviewer.
46
Let's assume that from now on, companies increase their security budget to protects their OT devices and networks. Will customers be happy if that increase being carried over to the final products' prices? I'm asking this because typically such costs impact the overall operational costs of a business, and the customers eventually got hit by the price hikes. bleepingcomputer.com/news/se…
33
Every now and then, you will see similar products or services like yours popping up on your social media feeds. You can either think you’re doomed because they do exactly as you, or make it a strong conviction that the market is ripe for harvesting and you just keep working hard to get them. I choose the latter. You?
1
1
59
When someone has time for others compared to you, it shows his commitment to your collaboration compared to others. Don’t feel bad about it, just prove them that you can do better. When they change their attitude, you realize how everything is all about business transactions for most people. Partnerships for most people are still about what they can gain from others instead of what they can give.
1
2
68