Stevan Koncar

Turning your LinkedIn into a 6-figure Revenue Channel.

Imagine waking up to a simple business that works around you & consistently hits $10,000/month.

No more feast & famine cycles:

You do what you love. 

You make a difference in people's lives. 

You have time & energy to live your own life.

You can scale to $500k/year without overworking yourself.

You don't worry about the cash flow, as you have recurring revenue.

You don't sell dog shit. You show people what you do and invite them to do the same.

You don't chase Clients. You waste zero minutes talking to people who are not ready to buy. 

Btw, this isn't some unattainable dream reserved for the ones who found a magic pill.

In fact, you don't need a magic pill at all —

Chances are, you've already got what it takes:

You know how to get results for Clients, but lack a system to deliver results at scale.

A system that doesn't require 100k+ followers, 60+ hours a week, and posting guru fluff on Social Media.

That's where The Authority Solopreneur blueprint comes in handy.

Because you create unique targeted content,
↳ You attract people who resonate with you. 

Because you solve problems for them, 
↳ They become your customers.

Because you have an outcome-based Offer that's easy to understand & even easier to buy, 
↳ You turn these customers into clients.

Because you've set your funnel right, 
↳ You create 3 revenue streams from 1 product alone.

When we put The Authority Solopreneur blueprint in place, 

We made $36,347 in 20 days — while working less.

And yes, you're right —

It's simple in theory, but a nightmare to execute all by yourself.

I know because I've made every mistake in the book, and learned how to make six figures a year the hard way.

Now I know better:

The fastest, easiest & least stressful way to scale your business is to find someone who's done it, steal their blueprint and implement it for yourself.

That's how our Club members accomplished in days what they couldn't in months before they joined.

Like S.S., who added $16,103 MRR to their bottom line in 5 weeks.

Or S.G., who doubled their revenue in 2.5 months and bought their dream home.

If you want to learn how they did it, you can join our free newsletter:

↳ Sign up here: https://authoritymarketing.kit.com/sign-up

If you want to explore joining The Authority Club & do it yourself:

↳ DM me "CLUB" and I'll send you the details.

If you want my 1:1 help to solve your biggest bottleneck fast:

↳  DM me "1:1" and I'll send you the details.

Co-Founder

You can go from "I have no idea what I'm doing" to "LinkedIn is my 6-figure revenue channel" IN 6 MONTHS ALONE.

When Dina approached me in mid-2020, she was starting to get traction as a Copywriter on LinkedIn.

She was getting clients but still struggled with:

∙ Attracting MORE IDEAL CLIENTS, and fewer window shoppers.
∙ Creating QUALITY CONTENT without spending hours on it.
∙ Charging WHAT SHE DESERVED.

I saw an opportunity, so I started working with Dina.

We were classic freelancers. No company brand. No website. No email list. Nothing.

But even without all that, in less than 6 months, we were getting 5 QUALIFIED LEADS A DAY.

All that with ZERO LinkedIn Ads, Pods, Outbound Messages, Automation Tools, or sleazy trick-the-algorithm tactics.

Soon after that, we raised our prices, started being more selective with Clients, and wrote 2 ebooks that made us $60,000+ in revenue.

But most important of all, we created something way bigger —

The LinkedIn Authority Blueprint.

A replicable, PROVEN PROCESS to build Authority & attract high-ticket Clients on LinkedIn for Coaches, Consultants, and service-based business Founders. 

Using the LinkedIn Authority Blueprint, our Clients got involved in 9-figure deals, crossed $10,000 in 6 weeks, and made $3,000 in their first week on LinkedIn.

If you want similar results, here's how we can help you:

✔️ 1:1 COACHING. 

Let's help you implement the exact strategy that made LinkedIn the most profitable channel for both our clients & us.

✔️ LINKEDIN PROFILE. 

→ Get your Profile Review with tips on how to improve it, or 
→ Let us turn your Profile into a 24/7 Sales Rep.

✔️ LINKEDIN CONTENT. 

→ Get your Content Review with tips on how to improve it, or 
→ Hire us to teach your team to build Authority & score high-ticket Clients through LinkedIn.

If you're serious about turning your LinkedIn into a 6-figure revenue channel, shoot me a DM now.

A client asked last week: “How do I sell higher-ticket deals?”

One thing was missing:

His experience was real.
His delivery was great.
His results were solid.

But the way he described his offer?

It positioned him as a low-ticket freelancer instead of a high-ticket consultant.

And here’s the part most solopreneurs never see:

Your offer speaks before you do.

It decides whether people put you in the

👎 $500 freelancer bucket, 

or the

👍 $5,000–$15,000 consultant bucket.

Most solopreneurs never notice this shift,

But people who buy consulting and services notice it instantly.

Because buyers aren’t listening to your knowledge.

They’re listening for structure.
They’re listening for outcomes.
They’re listening for confidence.

A freelancer will often say:

“I can help you with X, Y, and Z. Let me know what you need and I’ll deliver.”

A consultant says:

“Here’s the exact transformation you’ll get.

Here’s the process.
Here’s why it works.
Here’s the timeline.
Here’s the investment.”

Same person.
Same skills.

Different positioning.
Different price.
Different respect.

This is why offers matter more than most solopreneurs think.

When we installed a proper offer for one client, their $1,300/month service became a $10,000/month consulting engagement.

Another went from $500 audits to $6,000 strategic engagements.

Another from $2,500/month to $8,000 upfront.

None of them skyrocketed their delivery overnight.

They simply started speaking the language of a high-ticket expert instead of a low-ticket freelancer.

A friendly reminder:

If your work is excellent but your offer is unclear,

You’ll keep getting low-ticket buyers.

If your work is excellent and your offer is structured,

You’ll attract people who want to pay for outcomes, not hours.

You can love it or hate it, but that's how it works.

---

👋 Hi, I'm Stevan, and I work with solo coaches & consultants to help them grow a simple $10k/month business built around them. I do it 1:1 & in our private community — The Authority Club. DM me to learn more.

Helping Coaches & Consultants grow a simple $10k/month business built around them. → $7.5M+ in Client Sales. → Learn how: authoritymarketing.kit.com/sign-up

The most underrated skill for solopreneurs isn’t “being good at what you do.”

It’s something else:

Knowing what to prioritize and what to ruthlessly ditch.

Because when you run a solo business, you’re not just:

- Chief Marketing Officer
- Chief Sales Officer
- Chief Delivery Officer
- Chief Scaling Officer
- Chief Finance Officer

You’re all of them. Every day.

And if you don’t know what actually moves the needle, you’ll drown in “important” things that change nothing.

Here’s what I see with most solopreneurs:

They’re not lazy.
They’re not clueless.
They’re not unqualified.

They’re simply overwhelmed by options.

One part of you says:
“I should post every day on LinkedIn.”

Another says:
“I should finally launch that newsletter.”

Then you remember:
“You still don’t have a proper website… and your offer needs work… and you haven’t spoken to a lead all week… and you ‘really should’ fix your branding.”

So you try to do a bit of everything.

A bit of posting.
A bit of tweaking the website.
A bit of reworking your offer.
A bit of planning a funnel.
A bit of random “learning.”

You go to bed exhausted,
But nothing big actually moved.

That’s not a discipline problem.
That’s a priority problem.

If everything is a priority, nothing is.

Here’s what I’ve learned the hard way:

At the beginning (and honestly, for much longer than people admit), your priorities are simple:

1. Have something worth buying.
A clear, outcome-based offer that solves a painful problem for someone specific.

2. Put it in front of the right people.
Not "the audience." Real humans who already trust you and fit your ideal client profile.

3. Deliver so well they’d feel stupid not to recommend you.
This is where you refine your process and earn the right to charge more.

If your calendar is full of things that don’t support these three, you’re not working hard — but staying busy.

Even at a later stage, you do not need:

- A perfect brand.
- A complex funnel.
- Ten different content formats.
- Three active platforms.
- Five core offers.

You need one clear offer, one way to get in front of buyers, and enough mental space to actually deliver and think.

That’s why, inside my own business and with my clients, we build a Freedom-First Business Model:

- One core offer at the center.
- A simple path to get in front of ideal buyers.
- A model where your time is protected and your income is not tied to “doing everything.”

Because once your priorities are clear, everything else gets easier:

Saying no.
Choosing what not to do.
Dropping things that don’t move the needle.
Letting go of the guilt that you’re “not doing enough.”

A friendly reminder:

You’re not stuck because you don’t work hard.

You’re stuck because you work hard on too many things that don’t matter.

---

👋 Hi, I'm Stevan, and I work with solo coaches & consultants to help them grow a simple $10k/month business built around them. I do it 1:1 & in our private community — The Authority Club. DM me to learn more.

There are two types of value you can provide in your content:

1. Hard value: how-to guides, frameworks, templates, etc.
2. Soft value: insights, personal stories, myth-busting, etc.

Hard value gets you tons of:

→ Likes, reach and engagement
→ “I’ll try your free guide and get back to you”
→ “You’re giving me so much free value. I’ll definitely buy soon”
→ “I’m going to see if this works first, and if it does, I’ll ask about the next steps”

But only a few people follow through.

The other 99.9% never buy.

Everything changes when you switch to soft-value content.

Our 1:1 clients and Club members know this well:

S.H. published his first post and got his first high-ticket lead.

J.F. got 10 leads and 4 yeses from a single post that had only 8 likes.

K.S. closed $3,000 from LinkedIn in her first week with just 300 followers.

All inbound.

A friendly reminder:

Choose your content wisely because it directly affects your revenue.

P.S. Today you can get our “Hard Value vs. Soft Value” Masterclass that made us $90K in 3 months for FREE as part of our Black Friday deal.

Find it in my featured section before we take it down at midnight.

When your messaging screams fear, your Ideal Clients don't come.

This is why many solopreneurs struggle to attract business —

They're afraid of making hard decisions so they stay vanilla.

😬 "I'll solve many problems for many different ICPs (because I'm afraid to choose one problem)."
😬 "I won't exclude this type of Client although they're shitty (because I'm afraid to lose options)."
😬 "I won't say what my service is NOT (because I'm afraid that this means fewer leads)."

Usually, the opposite happens.

When you say it out loud:

💪 "I'll state who I am for and for whom my service is."
💪 "I'll state who I am not and for whom my service is not."
💪 "I'll focus on my Ideal Clients and say no to everyone else."
💪 "I'll be straight to the point without beating around the bush."
💪 "I'll find a way to make it work even with the constraints I have."
💪 "I'll find people who'll help me solve what I struggle with and make it work."

You manage to build authority and attract your best clients.

It's the same in life and business:

The more intentional you are to achieve a certain goal,

The higher the chance to achieve it.

The truer to yourself you are,

The more attractive you'll be and the easier it will be to play the game.

That's how you build Authority online and make your best Clients come your way. 

The best part?

You've already got all the pieces of the puzzle. 

They're your Authority Assets and already in your head. 

All you need is to extract them and make them fit together.

---

You can still grab our Black Friday bundle in my featured section.

It’s called "Stand Out From Generic AI Content in 2026: The Ultimate Content Bundle" it's down from $197 to $47 until tomorrow.

"Hi Stevan. Would you remind me of the terms of your '1:1 & in our private community', please?"

A message from an inbound lead after reading this in my post:

"Hi, I'm Stevan, and I help solo coaches & consultants grow a simple $10k/month business built around them. I do it 1:1 & in our private community — The Authority Club. DM me to learn more."

I add that sentence to most of my posts these days.

But here’s the truth:

That one line doesn’t bring the leads. Everything before it does.

My lived experience.

Everything I’ve done over the last 37 years.

The mistakes, the lessons, the breakthroughs.

The conversations I have with clients every day.

The stories from my real life that people recognize themselves in.

Shared in a way that builds trust fast and is almost impossible to copy.

That’s the part that makes people DM me.

That’s the part that drives inbound.

That’s the part that works on both LinkedIn and in my newsletter.

And yes — it works even in the era of AI.

I'd even add: especially now.

Which is exactly why we created “Stand Out From Generic AI Content in 2026: The Ultimate Content Bundle.”

It’s the exact system with templates we use to turn your lived experience into content no AI can replicate.

And because it’s Black Friday, you can get it for $47.

Plus, if you grab it before Wednesday, you’ll also get a bonus $97 training video completely free.

Find it in the featured section of my LinkedIn Profile.

I just jumped off a call with a client who asked me: “How do I attract clients without sounding like a sleazy guru?”

And it’s actually simple, just not easy.

Here’s what I told him:

1. Show, don’t tell.

Don’t scream about how good you are.
Don’t tell people you’re “the best.”
Don’t call yourself an expert.

Just show your work.

Show what you notice about your audience.
Show insights from real situations.
Show client conversations that taught you something.
Show results you’ve created. Even small ones.

People trust what they see.
Not what you say about yourself.

This is why my content attracts clients, even with lower reach:

Every single thing I write comes from:

- Real client calls
- Real mistakes
- Real wins
- Real patterns I see every day.

No claims I can’t back up.
No “guru energy.”
No theatrics.

Just lived experience.

2. Sell only what you’ve done for yourself or your clients.

This wipes out the sleazy vibe instantly.

If you’ve solved the problem:

- for yourself
- for a client
- for a past employer,

Then you’re not selling hype.

My best offers came from things I actually lived through:

We built a $100k+ revenue system → we teach it.
We built offers that convert at $1k–$20k → we install them.
We built a Freedom-First Business → we help others do the same.

Nothing else.

No pretending.
No “fake it till you make it.”
No borrowing other people’s stories and calling them your own.

Just truth.

And that’s the whole point:

If your business is rooted in honesty, you’ll never sound like a guru.

A friendly reminder:

You don’t need louder marketing.

You need more realness in your marketing.

---

👋 Hi, I'm Stevan, and I work with solo coaches & consultants to help them grow a simple $10k/month business built around them. I do it 1:1 & in our private community — The Authority Club. DM me to learn more.

Lester Chng

Cyber CEOs Brand Strategist. I build your brand as you build your business. | Senior Cybersecurity Advisor | Author | Naval Officer | CISSP | 🇨🇦🇸🇬 |

You head a leading cybersecurity firm.
But your online presence doesn't reflect it.

In fact, being invisible is damaging. 

You understand the power of thought leadership.
You know LinkedIn shapes deal flow and adds credibility in the industry.
You just don’t have the cycles (or the copy) to share your expertise and experience.

You have stories worth telling.

The insights from being in the trenches.
The deep conversations with your ace teams.
The hard discussions with your clients. 

Don’t let this wisdom go to waste.

That’s where I come in.

--------------------------------------------------------------------------------------------

How we work together.

Profile & Positioning
=> Rebuild your LinkedIn profile so visitors see industry authority, not “another vendor.”

Content engine
=> Ghostwritten posts that leverage your insights and expertise into engaging LinkedIn posts. 

Outreach campaign
=> Targeted DM campaigns and audience-building strategies that build your authority and land you on podcasts and conference stages.

--------------------------------------------------------------------------------------------

You focus on growing your firm and protecting your clients.
And we will ensure the industry, clients, prospects, and investors can’t ignore it.

Let’s build the personal brand that commands the cybersecurity conversation and drives business.


Worked with global client portfolio 
- MSPs
- MSSPs
- Agentic AI SOC
- AI-powered GRC 
- Operational Resilience 

Senior Advisor, Financial Crimes Unit Exercises. BMO Fusion Centre

Execution of Financial Crimes Unit Exercise and Drill Program
• Design and execution of exercises and drills to operationalize the Financial Crimes Unit Fusion Centre
• Scenario creation and exercise execution for Information Security, Enterprise Fraud Management, Physical Security, and Global Crisis and Continuity Management teams 
• Providing effective challenge of incident response readiness through exercise observation
• Execution of enterprise-wide Purple Team Exercise


Cybersecurity Exercises: Purple Team, Ransomware, DDoS, Malware, Data Corruption, Data Breach, 3rd Party Incidents
Fraud Exercises: ATOs, Attack on Payment systems, Business Email Compromise, PII Breach
Physical Security Exercise: Active Assailant, Civil Unrest, Bomb Threats
Crisis Exercises: Disaster Recovery, Business Continuity, Operational Resilience, Fire Incidents, Natural Disasters, Utilities Disruption

We landed in Canada 8 years ago. 
Today I still get this question. 
Why did you move from Singapore?

I always answer with this as if one of the reason. 

“We were very comfortable and had stable jobs. In fact, I know almost exactly how many career will pan out”

And we wanted to try something diff. 

This is what it wld have looked like:
- stayed on in the Navy
- promotions to LTC or SLTC
- 300k salary (don’t quote me)
- waiting on a ~500k bonus in 2026
- complete command of 2-3 warships

This is the last 8 years instead:
- ~50% pay cut for first role
- took 3 role changes to gain parity 
- only to be laid off after a few years
- and living through a dead economy

If we take a snapshot view here, it is a disastrous decision. 

But of course it’s never that linear. 

Here are other things that I gained:
- explored 2 career paths. PM + cyber
- grew professional network from 0
- gained experience in enterprises
- sold digital products & services
- found mission driven role + team
- resilience and independence
 
The questions will always be asked. 

And the journey is still being written. 

P.S what questions do u always get when you tell your story?
How do u answer them?

JSESSIONID

li_at

Talks about #linkedin, #resilience, #cybersecurity, #crisismanagement, and #personalbranding

The Brand Strategist for Cyber CEOs. I build your brand as you build your business. | Senior Cybersecurity Advisor | Author | Naval Officer | CISSP | 🇨🇦🇸🇬 |

Rogers Cybersecure Catalyst, Toronto Metropolitan University is hiring.
We continue to grow and if our vision of "Cybersecurity for all" resonates with you. Check out and apply for these roles.

Director of Strategic Partnerships
https://lnkd.in/gaTXKaBz

Director, Public Sector and Small Businessess
https://lnkd.in/gFGDsGvG

Program Lead
https://lnkd.in/gSajF8eK

Cyber Clinic Program Lead
https://lnkd.in/gcFhZFkP

Operations Coordinator

Check out this job at Toronto Metropolitan University:  https://lnkd.in/g2S-fNFa


Applications close soon and start the new year in a role and organization that is shaping the future of Cybersecurity in Canada and beyond.

If I didn’t start writing on LinkedIn ,
I would probably be struggling now. 

You may think I’m exaggerating. 

How can writing on LinkedIn have such as an impact of one’s life?

It has on mine. And here is why. 

1. Writing here has been therapeutic.
I left Singapore for Canada in 2017. Most of my friends and family are back there and it’s never easy making new friends and connections abroad. Especially in adulthood. 

Writing here has allowed me to connect with many others and some have become friends whom I know I can call upon to have a chat abt life. 

2. Writing here opens opportunities. 
I never had a business lens. In fact, I have never earned $ other than from a full time job. Writing on LinkedIn allowed me to learn from so many other entrepreneurs and it has even granted me opportunities to make money through writing. 

If you think it’s too late, it is not. 
If you think you are too old, you have a ton of experience that people are willing to pay for it. 
If you think you are too young, you have a ton of years to keep testing until you succeed. 

Reward > Risk

3. Writing here allows me to help. 
This week and next week, I’ll have the chance to help others learn about cybersecurity and LinkedIn in person. But everyday I seek to help with the words that I post. 

Initially I hoped my posts helps. 
Now, I know my posts helps. 
So I will keep writing. 

4. Writing here found me my job. 
So many people have told me that they are still struggling with their job search. Laid off and without a job for months, some even years. 

I’m not special. If writing here can help me get multiple job offers, it can help you do the same as well. 

Keep yr heads up. It takes time.

No alternative text description for this image

I work in a cybersecurity organization that drives diversity in cybersecurity. Yet we still see all male panels and leadership teams.

Yes, things are changing and Rogers Cybersecure Catalyst, Toronto Metropolitan University is driving that forward in partnership with the Mastercard Emerging Leaders Cyber Initiative (ELCI). This program is in its 5th cohort in 2026 and empowers women and non‑binary professionals with the skills, confidence, and leadership capabilities needed to thrive in this rapidly evolving field.

Lina is an alumni of that program and I interviewed her to learn about her experience in law enforcement, cybercrime, cybersecurity, leadership, and being an inspiration for the next generation.

𝗪𝗼𝗺𝗲𝗻 𝗶𝗻 𝗖𝘆𝗯𝗲𝗿 & 𝗟𝗲𝗮𝗱𝗲𝗿𝘀𝗵𝗶𝗽 𝗟𝗲𝗴𝗮𝗰𝘆

What still needs to change to help more women move into cyber leadership roles?

STEM was historically a predominantly male domain and while there has been a shift, we need to encourage girls early on towards cybersecurity as a future career. From a leadership perspective, encourage authentic inclusive environments (not a checkbox!) where all voices at the table are valued and heard. Mentorship and allyship are key to building confidence.

What advice would you give to women thinking about shifting into cybersecurity?

One of my favourite things about cybersecurity is that it is a field where diversity of thought is welcome and there are so many opportunities for different specializations. Don’t be afraid to step out of your comfort zone and take on the challenge of finding your passion. 

If you enjoyed this interview series, please follow Lina. She is a passionate defender in the cybersecurity space and an inspirational leader.

P.S. What is your company doing to promote diversity?

Career pivots are always challenging.

But you never start from zero.

Lina has made some interesting moves in her career. 

Do you know she started in the army? 
Legend has it she asked for the hardest role and they sent her to the infantry. 

She then joined the RCMP where she embarked on a 30 year career with her last role as the Unit Commander of RCMP Cybercrime Investigative Team. 

I interviewed Lina to learn about her experience in law enforcement, cybercrime, cybersecurity, leadership, and being an inspiration for the next generation.

𝗖𝗮𝗿𝗲𝗲𝗿 𝗙𝗼𝘂𝗻𝗱𝗮𝘁𝗶𝗼𝗻𝘀 & 𝗧𝗿𝗮𝗻𝘀𝗶𝘁𝗶𝗼𝗻

You led several RCMP units before moving into cyber. What lessons from policing still guide how you lead in cybersecurity?

My approach to leadership, regardless of the unit or program line, has always been about helping my teams be the best version of themselves and ensure they had what they needed to execute their roles effectively; be it tools, training, mentoring or support.  

When you took on the cybercrime team, what was the biggest mindset shift you had to make?

The cybercrime team is somewhat unique in policing, especially when considering the diversity of specialties within the cyber team itself. I found myself in the unfamiliar position of not being the most experienced person on the team. But it also meant that I had the opportunity to learn from my team. And it was amazing. Like drinking from a firehose, but so amazing.

If you enjoyed this interview series, please follow Lina. She is a passionate defender in the cybersecurity space and an inspirational leader.

P.S. What was your career before cyber?

Waiting for someone to interview you?

Stop waiting. Interview yourself. 

Many cyber CEOs are waiting for conferences to reach out for speaking opportunities, for organizations to invite them for expert panelists, or for a intimate podcast session. 

Some wait and nothing ever arrives. 

Use this platform, interview yourself and share your insights immediately. 

Here are 7 questions to answer:

1.	Who does your product help (role, industry, company size), and what does a “bad day” look like for them?

2.	What trigger pushed your client from “we should address this” to “we need a solution now” (audit, incident, board pressure, customer requirement, insurance renewal)?

3.	How has your clients describe the problem in plain language, without cybersecurity jargon?

4.	Where does the pain show up in your client’s day-to-day work (broken handoffs, constant exceptions, unclear ownership, reporting gaps)?

5.	What have your clients already tried, and why did it fail or stall (tool sprawl, consultants, spreadsheets, policies that didn’t stick)?

6.	What happens if nothing changes in the next 6–12 months?
How does that impact your client? (business impact, personal accountability, reputational and compliance exposure)?

7.	What proof did your client need before they’ll trust and buy (success criteria, non-negotiables, deal killers), and what niche-specific insight made them say “this person gets our world”?


You do realize no one is going to ask you those questions in an interview. 

Yet these are the questions you need to answer to position yourself and your solution as the go-to in the market. 

Now stop waiting and start answering.

Cybersecurity professionals struggle in OT organizations.

Especially if they don’t take the time to understand operations.

I interviewed my friend Osman Saleem, the Managing Director of Actimeta, who helps his clients secure their OT and IoT infrastructure.

What Makes OT/IoT Security Complex

Q3: What makes protecting operational environments fundamentally different from traditional IT cybersecurity?

OT environments have physical processes, so organizations prioritize safety, reliability, and availability of OT systems. Confidentiality of data takes a back seat. Additionally, OT systems have a much longer life cycle. As a result, these systems operate 24/7 on legacy equipment and networks making patching and rebooting a challenge. Security changes can directly impact physical processes, which means risk management must balance cyber controls with operational continuity.

Q4: Can you share an example of how operational and security priorities sometimes conflict — and how organizations can bridge that gap?

Security teams may recommend immediate patching or network changes, while operations teams push back due to downtime risks or safety concerns. Capital upgrades of legacy equipment are also cited as reasons for avoiding immediate patches. Bridging that gap comes from joint risk assessments, staged mitigation plans, or designing controls that reduce risk without disrupting critical operations
_____________________________

If you enjoyed this interview series, please follow Osman. He is a security infrastructure expert and has helped organizations build IoT and OT security programs.


P.S. What’s the biggest challenge in OT security?

OT & IoT Cybersecurity | Smart Building Technology | Smart Cities

Culture change is crucial for security transformations.

How does one influence change in critical infrastructure?

I interviewed my friend Osman Saleem, the Managing Director of Actimeta, who helps his clients secure their OT and IoT infrastructure.

Leadership, Culture & Collaboration

Q7: You’ve worked across consulting, engineering, and executive leadership — what have you learned about leading teams through complex technical change?

Real progress happens when leaders listen to their teams, and more importantly, remove obstacles instead of issuing directives. Operational teams adopt change when they feel respected, supported, and protected from unnecessary risk — not when security is pushed onto them as “another policy to follow.”

Q8: In your view, what’s the biggest cultural or mindset shift organizations need to make to strengthen their cyber and operational resilience?

Organizations must stop treating security as something they “enforce” on operations and start treating it as something they build with them. When frontline technicians and engineers are empowered as partners rather than problems to manage, security becomes practical, sustainable, and actually effective.
_____________________________

If you enjoyed this interview series, please follow Osman. He is a security infrastructure expert and has helped organizations build IoT and OT security programs.


P.S. Which sector needs the most security attention?

“I’ll take a break from writing/posting”. 

That’s what I told myself as I returned from my vacation. 

“It will be easy to get back into it”. 

Just like my exercise routine, my writing and networking rhythm were severly derailed. 

Even though my systems and tools were in place, I need to reconvince myself of the intend of being active on this platform. 

And it really does fall back to the why. 

Once that is reaffirmed, then the other pieces of the how kicks back in. 

Here’s back to sharing:
- how organizations should use cyber exercises to improve their readiness and resilience 
- how cyber CEOs should use LinkedIn to drive brand awareness 

P.S who thinks the LinkedIn feed is darn boring these days. Let’s start sharpening our storytelling skills.

If your tabletop exercise went smoothly, you just wasted everyone's precious time.

And this happens more often than you realize:
• No contentious discussions
• No pushbacks on decisions
• Reading off their IRPs
• Not surfacing issues
• Only a few spoke

How many hours was your last exercise?
2 hours? 3?

Have you counted how much that costs?

No, not just the price of hiring the big-time consultant to design a polished deck and to hog the discussion.

But the resource cost of the 15 participants?
And the planning costs.

We assume a flat rate of $100 per hour for the 15.
[Participant cost] 3 hours = $4500
[Planning cost] 10 hours, 2 people = $2000
[Consultant cost] $15000

Total cost: $21,500

Even worse, what did it do for your company?

• False sense of confidence
• Missed opportunity for hard discussions
• Leaders leave with more assumptions than answers

When you plan for your next exercise, aim for this instead

1.) Create contentious scenarios for discussion

2.) Force discussion around competing priorities

3.) Include secondary members instead of primary

4.) Increase the difficulty of the injects


How would you improve a "smooth" exercise?

Cyber CEOs are missing one of the biggest opportunities on LinkedIn.

Your founder story.

Not the pitch.
Not the product.
The reason you started.

Here is why it matters.

1. It builds trust faster than yr website.

People want to know the conviction behind your company. Your story answers the core question every buyer has: why should I trust you.

2. It humanizes your brand.

Cybersecurity is technical and crowded. Your story cuts through the noise and shows the person behind the mission.

3. It creates instant differentiation.

Competitors can copy language, pricing, and positioning. They cannot copy your journey.

4. It strengthens every future conversation.

When people understand your why, your product demonstrations, sales calls, and partnerships become warmer and easier.

Your founder story is not optional.
It is a strategic asset.

If you do not tell it, your audience will never hear it. And don’t wait for permission to share too. 

No one is gonna give you that.

“Complacency kills” isn’t just a policing lesson. 

It’s the future of cyber leadership.

Regardless of how fast AI tools evolve, or how quick your organization adopts AI, humans are here to stay and can make or break your cybersecurity program.

I interviewed Lina to learn about her experience in law enforcement, cybercrime, cybersecurity, leadership, and being an inspiration for the next generation.

𝗧𝗵𝗲 𝗙𝘂𝘁𝘂𝗿𝗲 𝗼𝗳 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗟𝗲𝗮𝗱𝗲𝗿𝘀𝗵𝗶𝗽

What qualities will define strong cyber leaders in the next few years?

Outside the box thinkers who think fast on their feet but never at the expense of a security-first mindset. There is a saying we all learn very early on in policing, “complacency kills”. This is so transferable to cybersecurity; don’t sit back and assume that previously effective strategies will translate to future successes against threats.

How do you balance technical precision with the human side of leadership?

Understanding how technology enables human-centered security is key for me. I am a big proponent of what I refer to as the “human firewall” and helping leaders recognize that incorporating humans as part of cybersecurity strengthens organizations as a whole. 

If you enjoyed this interview series, please follow Lina. She is a passionate defender in the cybersecurity space and an inspirational leader.


P.S. What is the most important trait that a cybersecurity leader should have?

Merry Christmas!
These were my 12 predictions for 2025. 

1. LinkedIn becomes TikTok ✅ 
2. Bitcoin goes bananas ❌
3. Good writing 🚀 ✅ 
4. More cyber jobs ❌ 
5. Support for employee advocacy ❌
6. Everything remains expensive ✅ 
7. People become dumber with AI ✅ 
8. People become smarter with AI ✅ 
9. Trust becomes a rare commodity ✅ 
10. More people will be burned out ✅ 
11. AI spam gets out of hand ✅✅ 
12. Importance of personal touch 🚀🚀 ✅✅ 

What’s your 2026 prediction?

Give me 1 good one!

If someone looked at your LinkedIn profile for 20 seconds, do they know what you do?

Most founders fail this test, even when they are genuinely great at what they do.

Here’s a 20-minute “Profile Snapshot” exercise to make your profile and solution instantly understandable.

𝗦𝘁𝗲𝗽 𝟭:
Write 3 bullets that remove all guessing.

Open a blank note and write:

• What I do: (in plain language)
• Who it’s for: (a specific buyer, not “everyone”)
• What changes: (the before and after)

𝗦𝘁𝗲𝗽 𝟮:
Review your LinkedIn Profile.

• Headline
• Banner
• About Section
• Featured Section
• Last 3 Posts

𝗦𝘁𝗲𝗽 𝟯:
Identify where there is dissonance.

𝗦𝘁𝗲𝗽 𝟰:
Immediately correct the areas that are confusing.


Unclear Profile = Confused Reader = Missed Opportunities

Take a second to count your personal connected devices.

Now, estimate that number for an enterprise set-up.

Enterprises struggle to keep up with the inventory, tracking, management, and governance of their IT systems. Industries and companies that rely heavily on physical systems, such as monitoring devices, automated systems, and highly integrated systems, add layers of complexity and associated risks to maintaining operational efficiency and security.

I interviewed my friend Osman Saleem, the Managing Director of Actimeta, who helps his clients secure their OT and IoT infrastructure.

The OT/IoT Security Landscape 

Q1: How has the growing interconnection between physical systems and digital networks changed the way organizations think about cybersecurity?

Organizations that run physical systems and OT are more aware now of the risks that come with connecting them to digital networks. Asset owners are increasingly focused on securing these environments—marketing hype can amplify the fear, but the concern is justified. More connectivity expands the attack surface and links cyber incidents to real-world impacts on safety, reliability, and finances. As a result, there is a shift to treat cybersecurity as an operational responsibility, not just an IT issue.

Q2: From your experience, what are the biggest misconceptions business leaders still have about securing operational or connected environments?

Many business leaders place more emphasis on tooling and technology. Their main focus should be prioritized towards embedding cybersecurity practices and controls in their business workflows, organizational processes and ensuring their governance is not just documented, but functional. 
_____________________________

If you enjoyed this interview series, please follow Osman. He is a security infrastructure expert and has helped organizations build IoT and OT security programs.


P.S. What are some IoT/OT security assumptions that many have?

Addressing security issues in an OT heavy organization is an uphill battle.

Especially if we blindly apply IT security principles.

Where should one start? Or is it an impossible task?

I interviewed my friend Osman Saleem, the Managing Director of Actimeta, who helps his clients secure their OT and IoT infrastructure.

Building Secure and Resilient Systems

Q5: When you work with clients on OT/IoT cybersecurity, what guiding principles or frameworks do you find most effective?

Common sense, to start with. We also rely heavily on frameworks like NIST SP 800-82 and ISA/IEC 62443, focusing on asset visibility, segmentation, and defense-in-depth. These frameworks take a risk-based approach. There are industry-specific regulations that may also apply. Effective cybersecurity programs align cybersecurity controls directly to safety, reliability, and regulatory objectives rather than treating security as a standalone effort.

Q6: How can organizations take practical first steps toward improving their OT or IoT resilience without massive overhauls?

Work on foundational knowledge first. Document your environment and how OT intersects with and affects other organizational departments. Start with visibility - and I don’t mean deploying a tool. Understand what assets are connected, where data flows, and who owns them. Understand your existing staff's skill set. Establish your risk tolerance thresholds. Document everything. Then implement basic segmentation, access control, and incident response planning — small changes that dramatically reduce risk without major system interruptions.
_____________________________

If you enjoyed this interview series, please follow Osman. He is a security infrastructure expert and has helped organizations build IoT and OT security programs.


P.S. What are some key differences between IT and OT security?

If growing your LinkedIn presence as a cyber CEO is not part of your 2026 plan, it is a huge marketing miss. 

The others parts are shaping up:
- website copy
- marketing swag
- cold email blasts
- conference booth
- CISO wine and dine 😃

All that is important and probably takes up the bulk of your budget. 

And then when your prospects land on your LinkedIn page, it blands (yes bland) in with the rest of the corporate copy. 

“We are on brand.”
“Our product speaks for itself.”

What could have been a differentiator from your competitors and a vibrant platform to build a community and awareness for your company. 

Instead, it just fades to the background. Like many of the other passive accounts. 

Is your LinkedIn account working your you, your company, and your vision?

Or will 2026 be another missed opportunity? 

Your platform. 
Your choice.

LinkedIn

Most cyber CEOs make the same LinkedIn mistake.

They publish generic cyber opinions.

Humans are the weakest link.
Zero Trust is hard but important. 
AI is risky but is changing the world. 

It feels safe. 
It feels like thought leadership.

But it is a losing strategy.

Cut the noise and focus on:
- industry constraints
- operational challenges
- tech stack experiences

When you post generic cyber content, you create three problems:

1. You blend in.
If 50 other CEOs could have written it, the market will not remember you.
	
2. You attract the wrong attention.
Likes from practitioners and vendors, not conversations with decision-makers.

3. You confuse prospects of yr niche.  

Instead, pick a niche and own it.

Not “ransomware.” 
Ransomware for school boards, manufacturers, or healthcare suppliers.

Not “incident response.” IR for mid-market teams, OT-heavy environments, or critical infra orgs.

It is much more efficient to build in a specific niche than to spam. 

P.S: If I read your last 10 posts, would I know exactly who you’re writing to?

How to instantly instill confidence during an incident response call?

One of the key features in every incident response plan is the incident response call or CSIRT (cybersecurity incident response team) call. 

Yet, it is hardly ever practised and you can confuse everyone if it is a mess. 

There is no clear lead, the agenda is sketchy, and the conversation goes all over the place. Even worse, it drags on with no end in sight. 

A simple way to fix this. 

Meetig structure + Practice

Here is a sample meeting structure:

1. State the objective and summary
2. Facts so far (what we know, what we think, what we don’t know)
3. Impact and scope 
4. Top 3 priorities and risks
5. Decisions needed now
6. Action item review
7. Comms and notifications
8. Recap key next steps
9. Open for questions 
10. Timing of next call 


You need to practise these calls. 
And run it with military disciple. 

P.S what agenda item wld u add?

Here’s one signal to know yr cyber exercise is highly effective. 
And most TTXs never trigger this. 

We recently executed a cyber range simulation exercise that put an IT team through a stressful scenario. 

The team was actively analyzing the IOCs and raise many relevant points for decision making. The leadership team weighed the risks and make a decision for containment. 

This decision was communicated to the technical teams and it spark a behavior which I didn’t expect but was glad it happened. 

The IT team responded to seek clarification on the decision. The instructions from the leadership team was clear on intent but the IT teams wanted to ensure that the leadership team understood the risks and nuances of the decision. 

And the discussion got pretty heated. 

This is termed as “Challenge and Response” and is something that we used while we manage the navigation team to ensure the safety of the ship. 

Team members would challenge the instructions (not the authority) if they were unclear or they had information that may impact the decision. The officer of the watch will have to respond to confirm or clarify the order. 

The purpose of this mechanism was to ensure that there was an avenue for clarification of an order without the risk of insubordination. 


So to my surprise, I saw this playing out as we ran our exercise. 

This is a healthy sign that the team had the right culture and understood the intent of the team’s actions. 

How did the heated discussion end?

I had to intervene, acknowledge the perspectives of both parties, and park the issue aside to continue w the exercise. 

This learning point would not occur in a benign tabletop exercise. It took a realistic high pressure scenario to tease out the practical considerations of incident response. 

P.S can u guess what the discussion was about? 
I’ll give a prize if anyone guessed it!

taplio

The Battle

Stevan Koncar

Lester Chng

Followers

Posts

Engagements

Likes

Performance ScoreStevan Koncar's LinkedIn Performance

Performance ScoreLester Chng's LinkedIn Performance

Ready to grow your LinkedIn presence?

taplio

The Battle

Stevan Koncar

Lester Chng

Followers

Posts

Engagements

Likes

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}Stevan Koncar's LinkedIn Performance

Performance ScoreLester Chng's LinkedIn Performance

Ready to grow your LinkedIn presence?

Performance ScoreStevan Koncar's LinkedIn Performance