Supporting startups and small businesses to pass ISO 27001 and SOC 2 audits the right way.

Remote
Joined September 2007
I’m no longer confident about direct ROI of exhibiting at a trade fair. For brand awareness still OK. But expecting warm/hot leads? At least in my industry that sounds impossible now. Seems like intimate closed gatherings is something I need to focus on in 2027.
13
Should I accept a stranger's request to connect on LinkedIn based on this message? I'm confused of whether I should feel proud or sad looking at this message.
1
1
42
When you put yourself out there with your product, whether online or in a trade-fair, trust me when I say that there are some people who believe they can do better than you. Leave them be, and ask them to put themselves out there like yourself, and see whose product will be used by paying customers. His or yours. Even when both products are successful in the market, the market is big enough for multiple players. Don't put yourself in a position of stress because of others' comments.
2
45
School photography is a very good business even in the age of AI. Every year I receive 2 buying codes from my children because they had been photographed, individually and together with their classmates. Every year. That's constant ARR.
50
The further you are in your business, the more expert you become in suppressing excitements. In the beginning, you'd feel very happy when you get positive feedback. Come years afterwards, that feedback won't mean anything when they are not end-up paying for the service. I guess being numb in politeness is the key for success 🤣
1
56
People hate receiving follow-up emails. But the same people also forget the follow through what they promised to do. People, make up your mind! You cannot have both!
1
23
Once again @claudeai saves me time and rights before signing a legal document with potential partner in the GCC region.
25
It’s definitely possible to enjoy road trips in Germany without cash (cashless). The past week we have proved that despite some places still requiring cash-only as their payment method, most spots are already accepting debit and credit cards.
37
I just completed a vendor security risk assessment using @3rdcomply It completes all the analysis in about 15 minutes. Then I reviewed and adjusted the outcomes for about 10 minutes. So total 25 minutes of AI + Human work. While it took the vendor 4 days to send all the relevant documents. Am I successfully making TPRM fun? Ah I wish 3rdcomply.com was there when I did the whole work manually a few years ago…
39
Apparently in 2026 someone still still using '123456' as password to protect sensitive national information. And most leaders busy talking about AI-powered cyberattacks? 🤣🤣🤣🤣 theregister.com/security/202…
1
44
Still amazed knowing that some people still stuck in demanding certs like CISSP or CISM to be working on infosec projects. No wonder the same people keep saying that it's difficult to find the right candidates to fill the job openings. They gated the roles with something trivial.
74
Thanking @claudeai to accompany me reviewing a draconian NDA document from someone who would like to partner to distribute @3rdcomply Yes, eventually I will need human lawyer soon, but for now I'm happy with @claudeai as reviewer.
46
Let's assume that from now on, companies increase their security budget to protects their OT devices and networks. Will customers be happy if that increase being carried over to the final products' prices? I'm asking this because typically such costs impact the overall operational costs of a business, and the customers eventually got hit by the price hikes. bleepingcomputer.com/news/se…
33
Every now and then, you will see similar products or services like yours popping up on your social media feeds. You can either think you’re doomed because they do exactly as you, or make it a strong conviction that the market is ripe for harvesting and you just keep working hard to get them. I choose the latter. You?
1
1
59
When someone has time for others compared to you, it shows his commitment to your collaboration compared to others. Don’t feel bad about it, just prove them that you can do better. When they change their attitude, you realize how everything is all about business transactions for most people. Partnerships for most people are still about what they can gain from others instead of what they can give.
1
2
68
When you have strong network, it's nice if your business can grow through warm introduction. But if not, just keep banging people through cold outreach and never think that this crazy approach is beneath you. The universe always give its blessings to those who genuinely working on their crafts.
51
In the past months I travelled, I always fully alert when in: Brussels, Berlin, and today Cologne. I feel totally safe when I was in Singapore and Dubai. Why Europe, why?
48
Let me say it again here: SOC2 costs is not just about the audit and maybe tools and consultants. You also need to consider the costs of your team not doing what they supposed to do, building and delivering, and learning + stress costs for people who never done it before. Make sure you choose your implementation and audit partners carefully.
2
2
81
Every founders believe that their ideas or products are the best. But the market, even competition judges, may have different opinions. So, keep calm, don't be dissapointed too much and keep pushing.
2
55
My professional and commercial network may be relatively limited. I feel fortunate to be consistently surrounded by good people who offer genuine support exactly when I need it.
34