Have one of your team train and take a cert like CISSP. Even if you don’t believe in certs going through the process will show you exactly what large organisati

Have one of your team train and take a cert like CISSP. Even if you don’t believe in certs going through the process will show you exactly what large organisations consider to be “best practice”. There will almost certainly be a CISSP at your client who will take you seriously once you are “one of the club”. And it will be a nice bit of resume padding for the future anyway.