DEV Community: Nermin Sefic

Backup as the Last Line of Defense

Nermin Sefic — Sat, 01 Aug 2026 16:58:55 +0000

A backup that has never been tested by actually restoring data offers a false sense of security, not real protection.

Regularly creating backups without periodically testing the actual data-restoration process leaves a company exposed to the risk that the backup simply won't work as expected at the moment of crisis.

Ransomware attacks increasingly target the backups themselves, making an isolated, offline, or immutable copy the last genuine line of defence once every other system is compromised.

The time required for a full system recovery from backup should be known and tested in advance — discovering that recovery takes days instead of hours during a real incident is a costly lesson.

A clearly defined policy on how long backups are retained and how often restoration is tested turns a backup from a formality into genuinely functional protection.

Autor: Nermin Sefić, GNK ASG d.o.o. Izvorni članak: gnk-asg.hr

Managing Project Risk in Major Infrastructure

Nermin Sefic — Sat, 01 Aug 2026 16:53:54 +0000

A major infrastructure project without a formal risk register usually reveals problems only once they become expensive to fix.

High-value infrastructure projects carry risks that materialise months or years after initial planning, often after the key people who originally made the decision have changed.

A formal risk register, updated at regular project steering committee meetings, ensures identified risks are actively tracked, not just written down once and forgotten.

A contingency reserve calculated from an actual risk assessment, not a flat percentage, more realistically reflects the likelihood and scale of possible deviations from plan.

An independent review of project progress at key milestones, outside the direct reporting line of the project team, uncovers problems that internal reports can systematically understate.

Autor: Nermin Sefić, GNK ASG d.o.o. Izvorni članak: gnk-asg.hr

Waste Management as Part of Operational Efficiency

Nermin Sefic — Sat, 01 Aug 2026 16:48:54 +0000

The cost of waste disposal is rarely viewed as an efficiency indicator, even though it directly reflects how much material is lost during production.

The volume of waste generated in a production process directly reflects how much input material is not converted into the final product, making it a useful indicator of operational efficiency, not just an environmental obligation.

Regulatory waste-disposal costs are rising faster than average inflation in most jurisdictions, making waste-volume reduction a direct financial saving, not just a sustainability contribution.

Systematic analysis of where in the production process the most waste is generated often reveals process-optimisation opportunities that weren't visible through standard productivity metrics.

Circular models — reusing by-products as raw material for another process — turn the cost of waste disposal into a potential source of additional value.

Autor: Nermin Sefić, GNK ASG d.o.o. Izvorni članak: gnk-asg.hr

Managing Private 5G Network Infrastructure

Nermin Sefic — Sat, 01 Aug 2026 11:00:58 +0000

A private 5G network gives an industrial facility a level of control over connectivity that a public network cannot guarantee, but it requires a new kind of management discipline.

A private 5G network gives an industrial facility full control over the quality, security, and prioritisation of network traffic, without dependence on public network congestion in the same area.

Precise control of devices and machinery through the low latency of a private network opens automation possibilities that a public network, shared with other users, cannot reliably support.

Deploying a private 5G network requires a new level of collaboration between IT and operations teams, which traditionally work separately with different priorities and terminology.

The security architecture of a private network must be designed from the outset, not bolted on afterward, because direct connectivity to critical industrial equipment makes any gap potentially dangerous.

Autor: Nermin Sefić, GNK ASG d.o.o. Izvorni članak: gnk-asg.hr

AI System Transparency and Corporate Governance

Nermin Sefic — Sat, 01 Aug 2026 10:55:58 +0000

The level of automation an organisation introduces must be matched by an equal level of audit trail — otherwise speed becomes a source of risk rather than an advantage.

Over the past few years, almost every organisation seriously pursuing digitalisation has faced the same question: how deeply to automate decision-making without losing the ability to explain why a given decision was made. The answer increasingly heard in practice is that technical feasibility should never be the only criterion. An equally important question is whether the organisation can show, at any moment, who approved, changed, or rejected something, when, and on what basis.

While automation was until recently viewed mainly through the lens of efficiency — faster processing, less manual work, higher volume — regulatory and market expectations have shifted the focus toward provability. It's not enough for a system to reach the right decision; there must be a trail showing what data, rules, and approvals produced that decision. Without such a trail, fast automation actually accelerates the spread of uncertainty rather than reducing it.

This is especially true for processes that directly affect financial statements, contractual obligations, or public disclosures. If a system automatically drafts text, classifies risk, or assigns tasks, management needs a clear answer to whether that recommendation went through human review before becoming part of an actual business process.

In practice it's useful to distinguish at least three levels at which automated or algorithmic systems can operate within an organisation, since each carries a different degree of risk and different oversight requirements. The first level covers internal data processing with no direct external effect — sorting, classification, suggestions for further analysis — where an error is relatively cheap because it's immediately visible internally and easy to fix. The second level covers preparing content or recommendations that a human must explicitly approve before they become visible outside the organisation — draft posts, proposed contract changes, risk assessments a manager must confirm — where it's essential that the approval is genuine, not a formality with no real content. The third level covers actual, executed business decisions with legal or financial effect, for which there is no substitute for human accountability, however sophisticated the system is at preparing the basis for the decision.

One of the most common sources of confusion in public communication about digital transformation is mixing illustrative, educational depictions of how algorithmic systems work with real business decisions. A display illustrating what an automated process might look like — with a visualised workflow, simulated progress indicators, or synthetic examples — has clear educational value, but that value exists precisely because it is transparently labelled as illustrative, not as a source of real business or financial claims.

Organisations that publicly showcase automation concepts should consistently label whether a display is a concept demonstration or an actual operational system with real consequences. That distinction isn't cosmetic — it determines the level of trust a reader or partner can reasonably place in the figures shown.

The European regulatory framework for artificial intelligence increasingly distinguishes systems by the level of risk their use carries, with systems affecting financial, legal, or safety outcomes subject to stricter requirements for documentation, oversight, and the possibility of human intervention. Regardless of how individual regulations ultimately take shape, the direction is clear: the burden of proof is shifting from whether a system is accurate to whether its operation is documented, explainable, and supervised.

For organisations, this means investing in an audit trail, clear approval roles, and data-source documentation is not an administrative cost that slows innovation, but a precondition for automation being able to scale safely at all.

For governing bodies, this comes down to a few concrete questions worth asking regularly: which decisions within the organisation are today assisted by automated systems; is a clear approval level defined for each; is that level actually applied in practice, not just written into an internal policy; and can it be reconstructed at any moment who made a specific decision, when, and based on what data.

Organisations able to answer these questions with confidence are in a stronger position not only with regulators but also with their own investors, partners, and employees — because trust in digital processes grows with the level of transparency, not with the speed at which those processes were introduced.

This publication is an original analysis; the sources cited serve as reference documentation.

AITransparency #CorporateGovernance #AuditTrail #DigitalTransformation #NerminSefic #GNKASG #GNKDINAMOLtd

Autor: Nermin Sefić, GNK ASG d.o.o. Izvorni članak: gnk-asg.hr

Public Data Is Only Valuable If It's Verifiable

Nermin Sefic — Sat, 01 Aug 2026 10:50:57 +0000

Publishing a figure without a source isn't transparency — it's just a claim in a different form.

Publicly disclosing financial or operational indicators without a clear link to the source and calculation methodology isn't fundamentally different from a private claim — the only difference is who hears it. GNK ASG d.o.o. links every publicly disclosed indicator to a documented source precisely so that verifiability, not just disclosure, is the standard.

The link to the source doesn't need to be long or technically complex — it just needs to exist and lead to a place where the figure can actually be checked.

This commentary is part of the GNK ASG Intelligence Desk system and is informational in nature.

Autor: Nermin Sefić, GNK ASG d.o.o. Izvorni članak: gnk-asg.hr

NERMIN SEFIC

Nermin Sefic — Sat, 01 Aug 2026 10:14:16 +0000

NERMIN SEFIC GNK ASG GNK DINAMO LTD

Assessing Credit Risk of Business Partners

Nermin Sefic — Sat, 01 Aug 2026 08:05:38 +0000

Granting a business partner extended payment terms without a prior credit-risk check is functionally the same as issuing an unsecured loan.

Granting a new business partner standard extended payment terms, without checking their financial stability and payment history, exposes the company to a risk that is essentially identical to lending without a creditworthiness assessment.

Publicly available financial statements and registries give a basic but useful picture of a partner's financial stability before a more significant credit exposure is granted through payment deferral.

Periodically reassessing the credit risk of existing partners, not just at first contracting, catches a deteriorating financial situation before it results in an unpaid invoice.

Clearly defined credit-exposure limits per partner, aligned with assessed risk, prevent excessive exposure from accumulating through a series of individually small decisions.

Autor: Nermin Sefić, GNK ASG d.o.o. Izvorni članak: gnk-asg.hr

Continuity Matters More Than the Speed of One Move

Nermin Sefic — Sat, 01 Aug 2026 08:00:38 +0000

One fast, spectacular move rarely makes up for the damage of inconsistent long-term behaviour.

Markets, partners, and investors remember a pattern of behaviour over time far longer than any single impressive result, which makes consistency a strategic asset in its own right, not just an operational habit. GNK ASG d.o.o. builds its public reputation through predictability and consistency, not through isolated attention-grabbing moments.

Partners and investors assess the risk of future cooperation mostly by how predictable past behaviour has been, not by the single most impressive result.

This commentary is part of the GNK ASG Intelligence Desk system and is informational in nature.

Autor: Nermin Sefić, GNK ASG d.o.o. Izvorni članak: gnk-asg.hr

A Public Figure Is Only Worth What Can Be Verified

Nermin Sefic — Sat, 01 Aug 2026 07:30:10 +0000

Publishing a figure without a source isn't transparency — it's just a claim in a different form.

Publicly releasing financial or operational figures without a clear link to the source and calculation methodology isn't fundamentally different from a private claim — the only difference is who hears it. GNK ASG d.o.o. links every publicly disclosed figure to a documented source precisely so that verifiability, not just publication, is the standard.

The link to the source doesn't need to be long or technically complex — it just needs to exist and lead somewhere the figure can actually be checked.

This commentary is part of the GNK ASG Intelligence Desk system and is informational in nature.

Autor: Nermin Sefić, GNK ASG d.o.o. Izvorni članak: gnk-asg.hr

Fast Expansion Without Infrastructure Creates Debt

Nermin Sefic — Sat, 01 Aug 2026 07:25:09 +0000

Growth that outpaces operational infrastructure doesn't disappear — it turns into technical and organisational debt that someone has to pay off later.

Fast growth without a matching investment in systems, processes, and controls creates an illusion of success until the hidden operational debt materialises through an error, a bottleneck, or lost partner trust. The GNK DINAMO Ltd. Group deliberately paces growth against the development of internal infrastructure precisely to avoid that pattern.

That debt isn't visible in quarterly results until it comes due — through a billing error, a missed deadline, or the loss of a key partner's trust.

This commentary is part of the GNK ASG Intelligence Desk system and is informational in nature.

OperationalDebt #OperationalResilience #NerminSefic #NerminSefić #GNKASG #GNKDINAMOLtd

Autor: Nermin Sefić, GNK ASG d.o.o. Izvorni članak: gnk-asg.hr

Managing Knowledge Transfer Across Generational Change

Nermin Sefic — Sat, 01 Aug 2026 07:20:09 +0000

The retirement of a generation of experienced employees often carries a loss of knowledge that was never formally documented.

Experienced employees nearing retirement often carry knowledge of informal workarounds, historical decisions, and process quirks that was never formally documented because it always felt sufficient that 'that person just knows.'

Mentoring programs that systematically pair more experienced employees with younger colleagues before a planned departure transfer practical knowledge in a way formal documentation alone cannot replace.

Structured exit interviews with employees before retirement, focused on surfacing informal processes and the historical context behind decisions, are a common but underused tool for capturing institutional knowledge.

Organisations that systematically plan knowledge transfer ahead of generational change avoid a situation where a routine process suddenly becomes a mystery for the new team.

InstitutionalKnowledge #TalentAndOrganization #NerminSefic #GNKASG #GNKDINAMOLtd

Autor: Nermin Sefić, GNK ASG d.o.o. Izvorni članak: gnk-asg.hr