It’s possible for a startup to go for years without taking seriously the idea of ISO 27001. A potential enterprise client will send an email