u/EducatorRelevant6828

Been having a lot of conversations lately with people who left corporate security jobs to go independent.

Every single one says the same thing: the technical side was never the challenge. The hard part was always the business side.

Specifically things like:

- Who actually makes the buying decision

at companies that need your services?

- How do you get in front of them without

cold calling 200 companies like a maniac?

- How do you know when a prospect is

actually ready to buy vs just curious?

For those of you who figured this out, what clicked for you?

Genuinely asking because the gap between great cybersecurity skills and a sustainable independent practice seems way bigger than it should be.

Tengo curiosidad sobre esto. He estado hablando con varios profesionales independientes de ciberseguridad últimamente y el patrón siempre es el mismo: las habilidades técnicas no son el problema. El problema es siempre conseguir clientes de forma consistente sin depender únicamente de referidos. Para los que llevan tiempo trabajando de forma independiente:
- ¿De dónde viene la mayoría de sus clientes?
- ¿Qué han intentado que no funcionó?
- ¿Qué cambiaría si pudieran empezar de nuevo?
Solo quiero entender mejor cómo funciona esto.

It's always something around:
- Finding consistent clients
- Knowing how to price services
- Getting in front of the right decision makers
For those of you who've been doing this independently for a while, what would you tell yourself on day one?