Ferry Haris

Supporting startups and small businesses to pass ISO 27001 and SOC 2 audits the right way.

[Ferry Haris @FeHa]

Will test if AI can really help my trip next week to HK smooth or end up a disaster.

Will test Gemini, Grok, and Claude.

Typically I have time to prep all my trips, but this time I just don’t have time for it.

While my mental maybe already prepared for Hong Kong, but my body and most of my brain still busy with work in Europe and USA.

Key requirements:
- not killing me during the process as I will pitch and exhibit at Hong Kong Fintech Week
- only cashless payments for attractions and meals

Excited to test it.

[Ferry Haris @FeHa]

@SimonHoiberg Which coworking space is this? Good reference for my next visit in a few weeks.

[Ferry Haris @FeHa]

Is SOC 2 really only needed when a company targeting US clients?

Let's discuss it further next week.

[Ferry Haris @FeHa]

The more I talked to people, who I look to so much, the more I'm not going to raise external fund as of yet.

They told me so, with all the good reasons they expressed based on the metrics I have today.

Then, bootstrapped it is!

[Ferry Haris @FeHa]

@freemanjiangg I’m visiting HK next week. Shall I also spare some time maybe a day to cross and see Shenzhen?

Never been to these two areas, so I don’t know what to expect or look for.

Any recommendations are welcome.

[Ferry Haris @FeHa]

Beyond Hoodies podcast recording starts again today.

It was a great session with Dustin Kluttz, a cybersecurity expert from the US who currently lives and works in China.

When the full episode is available on Youtube and Spotify, I'll share the links here as well.

[Ferry Haris @FeHa]

I need to do very unsexy thing today: asking all my team members to STOP working, to check all servers, services, working devices, etc. to be patches before the work can start again.

A life of tech company in 2026?

[Ferry Haris @FeHa]

One important impact of #php2shell issue today on my business: I cannot upload my bills to my accountant's task management system.

Yes, they use PHP.

[Ferry Haris @FeHa]

Is it too soon to say: ISO 27001 or SOC 2 won't save you from cyber incident?

#php2shell

[Ferry Haris @FeHa]

Following news and updates about PHP today makes me want to scream: I TOLD YOU TO PATCH!!!!

https://t.co/2Z0BOV6YKO

[Ferry Haris @FeHa]

I’m no longer confident about direct ROI of exhibiting at a trade fair.

For brand awareness still OK.

But expecting warm/hot leads? At least in my industry that sounds impossible now.

Seems like intimate closed gatherings is something I need to focus on in 2027.

[Ferry Haris @FeHa]

Should I accept a stranger's request to connect on LinkedIn based on this message?

I'm confused of whether I should feel proud or sad looking at this message.

[Ferry Haris @FeHa]

When you put yourself out there with your product, whether online or in a trade-fair, trust me when I say that there are some people who believe they can do better than you.

Leave them be, and ask them to put themselves out there like yourself, and see whose product will be used by paying customers. His or yours.

Even when both products are successful in the market, the market is big enough for multiple players.

Don't put yourself in a position of stress because of others' comments.

[Ferry Haris @FeHa]

School photography is a very good business even in the age of AI.

Every year I receive 2 buying codes from my children because they had been photographed, individually and together with their classmates.

Every year.

That's constant ARR.

[Ferry Haris @FeHa]

@dcolascione @kerckhove_ts Those who understand what's under the hood can say that, and I agree.

Unfortunately, when you are selling to enterprises and have to deal with clueless SOC2 auditors, the drama starts there.

[Ferry Haris @FeHa]

The further you are in your business, the more expert you become in suppressing excitements.

In the beginning, you'd feel very happy when you get positive feedback.

Come years afterwards, that feedback won't mean anything when they are not end-up paying for the service.

I guess being numb in politeness is the key for success 🤣

[Ferry Haris @FeHa]

@b4dgerr @Namecheap

[Ferry Haris @FeHa]

@dcolascione @kerckhove_ts That's why I hate SOC2 controls.

But unfortunately at the same time I live in the industry.

I guess I'll keep being the outlier to design controls that actually important for security.

[Ferry Haris @FeHa]

People hate receiving follow-up emails.

But the same people also forget the follow through what they promised to do.

People, make up your mind! You cannot have both!

[Ferry Haris @FeHa]

@itsolelehmann I hope everyone sees this.

As we grow in number of clients, actually I need to work with my email even more.

I guess the reality is and still would be: email is the king of communication, especially in corporates.