Ask HN: How to mutate a start-up into ISO 27001 compliance
How to keep start-up-like agility with all change controls, heavyweight security procedures and so on, implied by ISO 27001 compliance (requested by our main client)?