reqres

Thanks for the recommendation. Seems like a natural X-COM follow on. Appears to be 60% off on Steam atm as well!

If the UK was a US state, it wouldn’t quite be the poorest per capita. It would be USD400 per person better off than Mississippi. Everywhere else – from Arkansas to Washington – would earn anywhere between several thousand to several tens of thousands more.

For ISO 27001:

- Two-factor authentication (2FA) - Not stipulated - Access control for any accounts that store sensitive information - Access control policy is required - End-to-end encryption - Not stipulated - Training staff in data protection awareness, and a data privacy policy - Training policy is required

For the controls not stipulated in the standard (e.g. 2FA, E2E encryption), you may find you ultimately need them once you do an information risk assessment. As long as you explain clearly why the risk is not significant enough to require it or have good alternate controls, you won't get dinged by the auditor for not having these.

The standards are not incoherent. However by design they need to be abstract to apply across very diverse businesses.

I've implemented ISO 27001 myself (solo dev founder, 6 person company, USD2mn SaaS). The divergence in quality of the implementation depends on whether the company is actually using IS027001/SOC2 as a tool to formally define, implement and monitor information security or finding the path of least resistance to accreditation.

I've successfully implemented ISO 27001 (CTO, Sole Founder, ~USD2mn ARR SaaS Business). Had a small team around me (5 people) but essentially implemented ISO 27001 myself spread out over 6 months.

Would be very difficult to write a complete guide - it's a long journey and accreditation requirements very specific to the business. Do you have specific questions or areas of concern in mind? Been thinking I could write a few blog posts about my experience.

COVID-19 induced a recession all around the globe

I'd say there's one extra preliminary step missing:

Before (0): Understand if it needs to be built at all

UK expat in NL (3 years). Concur wholeheartedly. The Dutch have nailed their SSO app (DigiD) - this is the model to copy.

It eliminates a multitude of steps (sign up, proof of identity, credential management) to accessing any government service from booking COVID tests to paying taxes.

I'm a British software developer and SaaS business owner

I left the UK in 2017 because of Brexit. My company generates about GBP150k per employee. Prior to leaving this was 100% UK workforce. Following my relocation this is <50% and falling as we move to contract-based + remote. That's my n=1 experience with the "brain drain"

When I left the UK, there was a large & growing political/economic divide, unaffordable housing and poor/declining public services. It gave me a lot of stress and anxiety. Having left, I feel more disinvested from how things are turning out in the UK and it's helped greatly with my wellbeing

I've met other brits in my host country that share my n=1 experience. We're all just trying to quietly get along with it really - stay working and raising families

Isn't this a legitimate trading strategy in financial circles

Contracts like credit default swaps pay out if some organisation fails to meet their (debt) obligations