What 15 Years of Enterprise Security Taught Me About Compliance
Fifteen years ago, I started my career in enterprise security compliance. I’ve conducted hundreds of assessments—TISAX for automotive suppliers, PCI-DSS for retailers, ISO 27001 for manufacturers, NIS2 readiness for everyone. Along the way, I’ve learned lessons that don’t appear in frameworks or certification guides. Lessons about what actually matters, what doesn’t, and why some companies…