Building Enterprise-Level Cybersecurity For Small Businesses with Derek Hardmon

Most founders think cybersecurity is a technology problem. Derek Hardmon says it's a business problem — and that's exactly why most small businesses get it wrong.

In this episode of Ace Founder, Derek — founder of Secure Technology Consultants and a 20-year veteran of IT and information security across banking, healthcare, and regulated industries — breaks down how small and medium businesses can build a cybersecurity program that actually works, without breaking the bank.

If you've ever thought "we're too small to be a target" — this episode is specifically for you.

📚 What We Talk About:

  • 01:00 Derek's background and what Secure Technology Consultants does

  • 02:00 The story behind the name — and why simple and direct always wins

  • 03:09 The five things every founder needs in place before anything else

  • 06:04 Why cybersecurity has to be driven from the top down — not bottom up

  • 07:46 The two types of small businesses Derek encounters — and why both are at risk

  • 09:26 Why hackers don't target you specifically — they just check every door until one opens

  • 11:21 Why your small business might not be the target — but your bigger client is

  • 13:25 How Derek interviews and onboards a new client from day one

  • 15:36 How to build a cybersecurity program from scratch — step by step

  • 17:24 Why having policies isn't enough — you have to prove you're actually using them

  • 21:21 Why starting a cybersecurity culture early is a huge advantage for new businesses

  • 23:47 Why cybersecurity isn't a technology problem — it's a business function

💭 Key Quotes:

  • "You can't afford cybersecurity? You really can't afford a breach."

  • "It's not good enough to just have these things in place. You have to show you're actually performing these tasks."

  • "Think of cybersecurity not as technology — think of it as a business function, a living, breathing entity within your organisation."

  • "Hackers are checking doors. All they need isn't locked."

  • "If it's coming from the CEO, it's going to be better received than coming from somebody like me."

🔗 Connect With Our Guest:

Next
Next

The Story of WellBox: Building a Corporate Gifting Powerhouse with Justin Gilchrist