Menu
close
Talk with Us

Category:

Safeguarding Your Startups & SMEs with feha International Consulting: Your Trusted Cybersecurity Partner.

Optimizing Third-Party Risk Assessment: Strategies for Efficient Evaluation

By FeHa International Consulting on June 23, 2023
In today's fast-paced business landscape, organizations strive to integrate third-party products and services quickly. However, stringent regulations and the importance of good governance practices necessitate a thorough due diligence process. While this process can be time-consuming, it is crucial to protect our business against evolving threats. The third-party risk assessment process usually involves multiple functions, […]
Read more

The Year of Growth and Learning

By FeHa International Consulting on December 20, 2022
2022 is about to end. But I won’t let it pass without a self-reflection on how FHIC performed throughout the year and plan to progress in the coming year of 2023.  Looking Back Overall, 2022 is a fantastic year for FHIC. In summer we officially opened a new company in Indonesia, PT Comply System Indonesia, […]
Read more

Why bother getting ISO 27001 and SOC 2 when you still have to fill in Security Questionnaires?

By FeHa International Consulting on September 9, 2022
Many organizations ask what’s the importance of obtaining ISO 27001 certification or SOC 2 Type II assurance audit if they still receive security questionnaires from their potential customers? Maybe that’s your question too.  Your team is overwhelmed with security questionnaires coming from every customer. You are thinking of cutting this job out by having ISO […]
Read more

4 Tips To Manage Security Questionnaires Without Stress

By FeHa International Consulting on December 27, 2021
Although many believe that completing security questionnaires is just a compliance theater to win new sales, we at FeHa International Consulting argue that there are still good things that can be derived from asking and answering these questions for a secure and compliant relationship between buyers and sellers. Unfortunately not all Third Party Risk Management […]
Read more

ISO 27001: 5 Reasons You Must Validate your Vendor’s Certification

By FeHa International Consulting on October 27, 2021
Nowadays ISO/IEC 27001 has (almost) become a commodity product. From its full title in the certificate “Information technology - Security techniques - Information security management systems - Requirements”, we perceive that companies certified with this ISO standard have adopted good management systems capable of holding their information assets secure. But are their systems 100% safe […]
Read more

Let's talk about Security Questionnaire

By FeHa International Consulting on April 30, 2021
I shall start with a disclaimer that I’m writing this solely based on my short experience working first hand with security questionnaires. In the past, as auditor and then second line security officer and risk manager, I was just at the receiving end of the assessment completed by the first line officers. Although I cannot […]
Read more

Why I cannot rely only on SOC report for third party risk management

By FeHa International Consulting on March 5, 2021
Potential Client: “Ferry, my supplier has a SOC report. And I don't see any finding there. Can I say that everything is fine, everything is secure? The report was prepared by one of the Big4s.“ Me: “Not yet. The report is not everything. We need to do more than just relying on a SOC report. […]
Read more
FeHa International Consulting is an international IT GRC, cybersecurity, and privacy management consultant with expertise and experience ranging from startups, small business, up to large corporations.
Evert van de Beekstraat 354, 1118 CZ,
Amsterdam, Netherlands
contact@feha.io