a3d

hello there ~

I am looking for recos for independents who are willing to conduct security audit for our company. I am CTO decision maker. Any pointers appreciated.

Details below:

We are a B2B startup that has scaled to 3 digit M revenue. Our business is overseas (not US). Key decision makers are however from valley, some with serious startup/FAANG exp including me.

- Core of our platform includes customer facing apps (native android), e-commerce customer, order and item/catalog workflows hosted in GCP (native java some ruby on rails, unfortunately mostly one SQL) - third party tools that integrated running warehouses. - We are above average in GCP cloud security as per Google (we use lot of tools and are auditing sec command center)

We need to conduct a security audit for software in the cloud (where most critical data lives) as well as for our physical IT infra (laptops, routers, policies etc).

Key Question: 1. What should I include in RFP for a very tech and automation driven + cloud centered security audit? 2. How about Vanta and many of these startups who give you automate compliance. Any pointers appreciated. Thx!

I am not sure if I am the only one seeing this through but I feel that we are in midst of changing times in terms of the market shift. YC startup playbook is very relevant for valley (meaning a much more mature market such as US or EU). But what we are seeing with China to SE Asis and then India starting to follow defies most of the - how to start a company theory. There are quite a few models - marured to moid and even early stage - from wechat, alipay, grab, mobike, pinduodup and I won't mention a host of new one's emerging in ecom/fintech space. None of these map anywhere near YC theory of how to start a company.

This is not a criticism.

I am just asking if what I am seeing is what non valley founders are realising also - I am speaking from first-hand experience working in China/SE asia for past 3 years and recently Vietnam, where I met many founders.

Finally - what I really hope for is if someone can suggest good reads/books on growing scaling companies in Asian environments. The english literature is sparse on the topic and usuals of sam altman to peter thiel honestly does not fully apply in the global / cross border dynamics. World works somewhat differently for people starting company in Asia now and I kid you not - markets are huge and many huge names will continue to emerge beyond Tencent and Alibaba or Flipkart.

I am just turned off by how much good valley advise is now out of touch on what is happening in asia - circa 2018.