Dino Zelic

My first full-time job, at 25, was in the IT industry. The year was 2005. A cloud was something white and fluffy in the sky, and nothing else ☁️😁✌🏻 Twenty years later I'm still in the same industry — and almost nothing about it is the same. Along the way I've helped small companies, mid-sized companies and large multinationals get real value out of technology. Different logos, different decades, same job: understand the business first, then talk about the tech. Then the conversation changed. Technology stopped being only an opportunity and became an exposure as well. Digital transformation and AI made organisations faster — and made attacks more sophisticated, more frequent and considerably more expensive. So I moved to where the harder questions were, cybersecurity. Today I work with OT and ICS security, mostly with Nordic industrial organisations — the technology that runs factories, energy, water and production lines. It's an environment where the standard IT answers don't fit. You can't take a paper mill offline for patch Tuesday. Some of the equipment I help protect is older than my career. A few pieces are older than me. Here's the view I've landed on after two decades: Cybersecurity is the interaction between technology, processes and people. Working strategically with it means starting from the business-driven risk perspective. In other words — cybersecurity is not an IT issue. It's an operational issue. Which is why my work now sits where the technical meets the regulatory: 🔹 OT/ICS penetration testing — finding it before someone else does 🔹 IEC 62443 gap assessments and certification 🔹 CRA conformity assessment for manufacturers placing products on the EU market 🔹 NIS2 / cybersäkerhetslagen advisory The goal was never a perfect report. It's a clearer picture of which haystack the needle is actually in 📍👀 The struggle is real. The results are worth it. Wanna talk? Send me a message 😉