Written for the problem you have this month
Short pieces on the things that actually land on a Jordanian company between fifteen and a hundred and fifty people. No gate, no email form, no newsletter sign-up.
The data protection law is fully in force
What a 40-person company actually has to do about Law No. 24 of 2023 — six things, the 24-hour breach clock, and what it costs to ignore.
Read the short versionYour books are correct, and six weeks late
Correct and late costs you the same thing as wrong and fast: every decision is made on a picture of two months ago. What a five-day close needs.
Read the close calendarYour supplier is not on JoFotara. That is now your problem.
An invoice that never went through the national e-invoicing system is not a deductible expense — so your supplier’s admin problem lands in your tax return.
Read the checklistThe invoice was real. The bank account was not.
Supplier payment fraud has no malware and no suspicious attachment, and the email is often genuine. Four controls stop it, and every one of them lives in finance rather than IT.
Read the four controlsThe person who left in March still has access
HR closes the file and finance stops the salary. Almost nobody closes the accounts, because almost nobody owns the list of what the accounts are.
Read the listA customer asked for your ISO 27001 certificate. What happens now.
The real sequence to Stage 2, the three budgets people confuse with each other, and the three places these programmes stall.
Read the timelineHave a question these do not answer? The frequently asked questions cover what people usually ask before a first meeting — or just ask us directly.