Tino Šokić

Hi, I’m Tino Šokić.

I have spent more than 15 years in IT and cybersecurity, and if there is one thing I learned, it is this:

Cybersecurity is never only about technology.

It is about people.
It is about decisions.
It is about pressure.
It is about messy systems, unclear responsibilities, forgotten assumptions, and that one small thing nobody noticed until it became a problem.

Of course, tools matter. Frameworks matter. Standards matter. I work with them all the time.

But security does not become better just because we add another tool, another report, or another policy document.

Security becomes better when people understand what is happening, why it matters, and what they should do next. That is the part of cybersecurity I care about the most.

Not just another security guy

My positioning is simple: Not just another security guy.

Not because I dislike technical cybersecurity. Quite the opposite.

I started in systems and networks, and I still believe that IP addresses, logs, DNS, architecture, and basic infrastructure knowledge tell you more than most shiny dashboardsBut after years of working, teaching, consulting, and speaking about cybersecurity, I also learned that technical knowledge alone is not enough.

You can have a good vulnerability report and still fail to communicate the risk.

You can have threat intelligence and still not use it inside detections, controls, or decisions.

You can run awareness training and still not change behavior.

You can prepare policies and still have people who do not understand what those policies mean in real work.

That gap between security knowledge and real-world action is where I like to work.

What I help with

I help organizations and professionals understand cybersecurity in a practical, clear, and useful way.

My work includes cybersecurity training, Threat Intelligence training, Open-source Intelligence training, CompTIA Security+ training, EC-Council Certified Threat Intelligence Analyst training, and EC-Council Certified SOC Analyst training.

I also create role-specific security awareness programs, because I do not believe every person in an organization needs the same generic security message.

Developers do not think like HR.
Managers do not work like SOC analysts.
Executives do not need the same explanation as technical teams.

The message has to fit the role, the responsibility, and the decisions people actually make.

Besides training, I help organizations with ISO/IEC 27001 audit and certification preparation, vulnerability testing for systems and web applications, GDPR regulatory assessments, OSINT audits of IT systems, and social engineering tests, including phishing, smishing, and vishing.

In short, I help organizations see what they expose, understand what it means, and improve how they protect it.

Teaching and speaking

A large part of my work is education.

I have trained tens of thousands of students globally through live training, workshops, video courses, and international learning platforms.

I create and deliver courses on topics such as threat intelligence, open-source intelligence, cybersecurity awareness, AI security, risk management, vulnerability management, and practical security operations.

I also develop e-learning content, including course scripting, recording, and production.

When I teach, I try not to sound like a manual.

I like stories. I like real examples. I like showing how something works, where people usually make mistakes, and why the basics are still often the most important part of cybersecurity.

Because sometimes the most valuable lesson is not another complex framework.

Sometimes it is understanding the simple thing everyone skipped.

My view on cybersecurity

I do not think cybersecurity should be built only on fear.

Fear can get attention. But fear alone does not create understanding.

And without understanding, people either ignore security or follow rules blindly without knowing why. I prefer clarity.

Clearer training.
Clearer communication.
Clearer risk explanations.
Clearer decisions.

That does not mean oversimplifying cybersecurity. It means translating it into something people can actually use.

Whether I am teaching analysts, helping an organization prepare for ISO/IEC 27001, reviewing exposure through OSINT, testing human-facing risks, or speaking at an event, my goal is usually the same:

Make cybersecurity less mysterious and more useful.

Let’s connect

If you are looking for cybersecurity training, consulting, e-learning content, a speaker, or someone who can help your organization understand security without unnecessary complexity, feel free to explore my work or contact me.

I am not here to make cybersecurity sound more complicated.
I am here to make it make sense.

All good things start with a conversation, so drop me an email for free advice or a friendly conversation. You can reach me at tinosec @ proton.me.