Small Company, Big Threats: Cybersecurity for the Rest of Us
summary
A small consulting firm dedicates a part‑time employee to build an ISMS, answers a ~100‑question supplier self‑assessment, and discovers audits rate protections as non‑existent in many areas; the EU Cyber Resilience Act threatens fines of €50M or 2.5% turnover with enforcement from 2027. The team moves from scattered Google Docs to a linked Zenkit database, catalogs assets, assigns risk levels, plans vulnerability monitoring, and targets ISO 27001 certification next year but does not yet feel meaningfully safer.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:59Cybersecurity for small companies
- 3:46Real-world cybersecurity incidents
- 8:21Cybersecurity compliance journey
- 12:35Legislation and frameworks
- 16:55US regulations and ISO standards
- 18:22Building an Information Security Management System
- 21:52Documenting assets and risk assessment
- 23:41Implementation challenges
- 24:26Q&A
related talks
24mCybersecurity Awareness: Small & Medium Enterprises (SMEs)
46mThe Perfect Storm, What NIS2 and CRA Mean for Your IT Security Strategy
47mFuture Proofing SMBs for the Evolving Global Compliance Landscape
01h 03mBe your own Threatbuster!
59mMerging Security and Compliance: Perspectives on Emerging Regulations and Best Practices
29m3rd-Party Cyber-Risk Mitigation by Using ISO Standards
44mCybersecurity - Protecting the Organisation's Technological Assets
41mThe Business of Cybersecurity