Menu
close
Talk with Us

Category:

Safeguarding Your Startups & SMEs with feha International Consulting: Your Trusted Cybersecurity Partner.

Security Compliance Takes Time

By FeHa International Consulting on October 15, 2023
Many people believe or aspire to pass ISO 27001 or SOC 2 audits in weeks. But that's not the right and sustainable path to go with if you are serious about security at your company.
Read more

Why IT GRC Experts are as important as the GRC Software

By FeHa International Consulting on October 1, 2023
“Vanta guided us…. and we got SOC 2 Type II compliant in just a few weeks” says a testimony written in Vanta’s website. And many other fantastic companies also claim how powerful their compliance management software is. Yes, those GRC (Governance, Risk, Compliance) automation software can be very helpful but you cannot depend only on […]
Read more

The Cultural Lens: Enhancing Cybersecurity and Privacy

By FeHa International Consulting on May 21, 2023
In the realm of cybersecurity and privacy, cultural perspectives play a vital role. Each country has unique cultural references and values that shape its citizens' views on these issues. As cybersecurity professionals, we must expand our cultural understanding to effectively address these challenges. The Impact of Cultural Reference and Values: Culture significantly influences how people […]
Read more

Indonesian Tech Companies: Why Security and Privacy Compliance is Key to Going Global

By FeHa International Consulting on April 27, 2023
Last week, I was at the Hannover Messe 2023 and was blown away by the innovative tech offerings from Indonesian companies. However, while their tech is impressive, I noticed that many of them may be missing a crucial piece of the puzzle when it comes to going global - security and privacy compliance. In today's […]
Read more

Digital Trust: Indonesian Embassy Staff in The Netherlands Receive Fun and Informative Cybersecurity Awareness Training

By FeHa International Consulting on March 19, 2023
On Friday, March 17, 2023, the Indonesian Embassy in The Netherlands received cybersecurity awareness training from FeHa International Consulting. The training, aimed at improving the embassy's staff's knowledge of basic cybersecurity practices and enhancing digital trust, covered topics such as good password practices, the importance of updating operating systems and applications, and how to prevent […]
Read more

The Year of Growth and Learning

By FeHa International Consulting on December 20, 2022
2022 is about to end. But I won’t let it pass without a self-reflection on how FHIC performed throughout the year and plan to progress in the coming year of 2023.  Looking Back Overall, 2022 is a fantastic year for FHIC. In summer we officially opened a new company in Indonesia, PT Comply System Indonesia, […]
Read more

ISO 27001: All Your Questions Answered!

By FeHa International Consulting on October 26, 2022
We hear you loud and clear! In this post, we will try to answer all questions related to the ISO 27001 that often come to us from prospective and current clients. If you prefer to read it on some other time, you can download the page in PDF by clicking this link here. No contact […]
Read more

Why bother getting ISO 27001 and SOC 2 when you still have to fill in Security Questionnaires?

By FeHa International Consulting on September 9, 2022
Many organizations ask what’s the importance of obtaining ISO 27001 certification or SOC 2 Type II assurance audit if they still receive security questionnaires from their potential customers? Maybe that’s your question too.  Your team is overwhelmed with security questionnaires coming from every customer. You are thinking of cutting this job out by having ISO […]
Read more

What help do you need to get an ISO 27001 certification? Compliance software or Consultant?

By FeHa International Consulting on March 3, 2022
Are you aiming to get an ISO 27001 certificate soon? Are you wondering whether you need special software and/or an external consultant to pass the audit and warrant getting the certificate? This article tells you the conditions under which you need the specialty software and/or external consultants. The last part guides you in making decisions […]
Read more

How Your Small Business can be Digitally Secured (if You Are Not an IT Person)

By FeHa International Consulting on February 6, 2022
Do you want your business to be digitally secured? In this article we will give you a simple and no-cost tip that may save you a dozen hours of confusion and frustration because of an act of cybercrime. Anyone can be a victim of cybercrime. Both big and small companies. Only in 2021 we heard […]
Read more

ISO 27001 or SOC 2 - Which one should small business choose first?

By FeHa International Consulting on November 21, 2021
Customers and other sensitive information security is of paramount importance in this digital age. To show potential and existing customers how serious vendors take care of their own data and their customers data, many organizations pursue either ISO 27001 certification or SOC 2 independent attestation. But with a limited starting budget, which one should a […]
Read more

ISO 27001: 5 Reasons You Must Validate your Vendor’s Certification

By FeHa International Consulting on October 27, 2021
Nowadays ISO/IEC 27001 has (almost) become a commodity product. From its full title in the certificate “Information technology - Security techniques - Information security management systems - Requirements”, we perceive that companies certified with this ISO standard have adopted good management systems capable of holding their information assets secure. But are their systems 100% safe […]
Read more

Are all ISO 27001 certificates the same? (Part 2)

By FeHa International Consulting on August 4, 2021
Hopefully after reading my last post here, you have a clear understanding that not all ISO 27001 certificates are the same. The scope can vary and not all suppliers understand that they cannot “re-use” their hosting partner’s ISO 27001 certificate to claim that themselves are certified.  But then, I have seen several other cases in […]
Read more

Are all ISO 27001 certificates the same?

By FeHa International Consulting on July 5, 2021
In the coming months this blog will focus on my personal experience with ISO 27001 and SOC 2 from the perspective of managing third party security risks, especially the cloud based application vendors. Having reviewed countless assurance documents in this area, I think it’s fair to say that I have seen the sheer differences of […]
Read more

Do organisations need a dedicated Cybersecurity Committee?

By FeHa International Consulting on January 31, 2021
Gartner, according to the article shared by one of my contacts in LinkedIn, predicts that by 2025 40% of Boards will have a dedicated cybersecurity committee. It’s a good news for Cybersecurity and GRC professionals of course. But I’m challenging this movement with a question “Do we really need a dedicated committee to get cybersecurity […]
Read more

Network and Idol Effect for Successful Security and Privacy Awareness

By FeHa International Consulting on January 19, 2021
For the past week my Twitter, LinkedIn and Facebook timelines were busy with people discussing the updated Terms for WhatsApp. This update eventually lead to a lot of noise and many people looking into alternatives like Telegram or Signal. Whether people truly and fully migrate from WhatsApp or not, I guess only time will tell, […]
Read more

The Power of "WHY"​ to #SimplifyGRC

By FeHa International Consulting on December 28, 2020
If there’s one thing that always guides me staying true to my north in performing any tasks related to Governance, Risk Management, Compliance (GRC) and Cybersecurity for the past 10 years, it would be diligently asking “WHY”. Simple but powerful. Common sense yet effective. In many cases, I have encountered that “WHY” is the right […]
Read more

Cybersecurity: we are in it together!

By FeHa International Consulting on December 27, 2020
I’m sure every household must have a “weird” moment where the conversation between husband-and-wife is very unusual, that is a waste when not shared. This is mine on this morning, 31 October 2020 (note: it is a translated version, because at home we are speaking Bahasa Indonesia) A (me): ...relaxed while watching My Next Guest Needs […]
Read more

Illusion of Being Compliant and Security Framework(s) Saga

By FeHa International Consulting on December 27, 2020
"How can we be compliant with ISO 27001?"  "I think we are compliant with this security control requirement, but why our auditor still give us audit finding note?"  "Which framework is the best for information security: ISO 27001 or NIST or COBIT?" These three questions are just few examples of what I received from many […]
Read more
FeHa International Consulting is an international IT GRC, cybersecurity, and privacy management consultant with expertise and experience ranging from startups, small business, up to large corporations.
Evert van de Beekstraat 354, 1118 CZ,
Amsterdam, Netherlands
contact@feha.io