Mohd Atasha

Advisory enquiries

Strategy, commercial judgement and risk. What follows is the shape an engagement usually takes, so you can judge fit before writing.

Before you write

Strategy and commercial judgement is the larger part of the work: what a technology change is worth, what it will cost beyond the licence, whether the business case survives contact with the operating reality, and what a board should be asked to decide. This does not reduce to a fixed scope, and the first conversation is about framing the question.

Market and policy entry work draws on two years negotiating inbound investment on the Malaysian government’s side of the table, and on the policy design that followed. That experience is most useful to companies entering Southeast Asia, and to public bodies designing incentives that companies will actually respond to.

Founders and investors are worked with directly: commercial diligence on a technology proposition, and the harder question of whether an engineering claim will hold at the scale being promised.

Risk engagements usually open with an assessment rather than an implementation: establishing what has actually changed, what is now exposed, and what can be measured. Two to four weeks is typical. The three risk areas are network isolation and zero trust architecture, artificial intelligence governance, and cloud financial management as a control discipline.

Sectors most often served are telecommunications and media, financial services, government and investment promotion bodies, and operators of critical or industrial infrastructure.

Clients are never named, in conversation or in writing. If that matters to you it should, and it is the reason there are no logos on this site.

Not taken on

  • Implementation or managed service delivery. Strategy, assessment and architecture only.
  • Expert witness or litigation support work.
  • Engagements where the conclusion has already been reached and an independent name is wanted for it.
  • Introductions sold as a service. Where a relationship is useful to a client it is offered, not invoiced.

Send it

Reply within three working days.

Used only to reply to you.
A regulatory deadline, an incident, a board question, a planned migration.
When a decision is needed, and by when work would have to conclude.

Direct and secure channels

Email
Not published, to keep it out of the hands of address harvesters. The form above reaches the same person.
PGP
Public key, with its fingerprint and a way to check it against the mail provider rather than against this site. Encrypt to it and paste the result into the form above.
Signal
Available on request through the form.

What happens to what you send

Messages are stored in a private database, readable only by Mohd Atasha, and deleted automatically after one hundred and eighty days. Only the fields on the form are kept.

No cookies are set and no analytics are collected. Nothing you type here is sent to any third party: the form posts to this site and the message goes straight into its database.

One thing does leave. So that a message is not missed, an email service is told that an enquiry of this kind arrived, and when. It is not told your name, your address, your organisation, or any part of what you wrote. If the sensitivity of your enquiry makes even that insufficient, use PGP or Signal instead.