PLEN
Book a meeting
Menu
Incident in progress?Call +48 699 587 010
The FortCyber team around a shared table, discussing the risk register on the platform
  1. FortCyber
  2. Experts

FortCyber experts. Practitioners, not theorists

Auditors, ISMS officers, analysts, lawyers and trainers with experience in companies and the public sector. We know the regulations, and you see everyone’s work on the platform.

Book a meeting See references

Who works for your organisation

Each role has a clear remit and answers to you. You see everyone’s work on the platform.

Security manager

Your dedicated contact. Coordinates the team’s work, keeps track of deadlines and reports to management.

On the platform: management dashboard, decisions to approve and reports

ISMS officer

Runs the information security management system on behalf of management: risks, reviews and documentation.

On the platform: risk register, treatment plan, versioned documents

ISMS auditors and consultants

Internal and compliance audits, reviews and updating the system after regulatory changes.

On the platform: audit findings as tasks with owners and deadlines

Security analysts

Consult on automated analysis of events and vulnerabilities, and recommend fixes.

On the platform: console and agents, tests and vulnerabilities

Lawyers and incident handling

Incident classification, reporting, communication and documentation in a crisis.

On the platform: incident register and action history

Trainers

Training, social engineering campaigns and simulator exercises, including annual management training.

On the platform: training paths and campaign results

Who works with whom

Everyone on your side has a counterpart in the FortCyber team. The platform is your shared workspace.

Your organisationFortCyber platformFortCyber team
Managementdecisions, budget, oversight
decisions and reports
Security managercoordination and reporting
ISMS officer or person in chargeday-to-day security
ISMS and documentation
ISMS officerrisks, reviews, audits
IT admins and ITsystems and infrastructure
events and vulnerabilities
Security analystsanalysis and recommendations
Staffeveryday work with data
training and campaigns
Trainerstraining and exercises

In an incident, lawyers and the incident handling team join in.How we work

A FortCyber security analyst discusses vulnerability analysis results with a colleague

Expertise and clearances

  • ISO/IEC 27001 lead auditorsRolling out and auditing information security management systems
  • KSC auditorsQualified under the 2018 Polish National Cybersecurity System Act (KSC)
  • Security clearances“TAJNE” (Polish SECRET), “SECRET UE / EU SECRET”, “NATO SECRET”. Facility security clearance for national, EU, NATO and ESA classified information
  • Experienced CISOs and information security officers
  • Security testers and a SOC team
  • Partner law firm
  • Our own information security management system is ISO/IEC 27001 certified

Team certifications

Selected certifications held by our auditors, consultants, pentesters and project managers.

Information security

  • CISSPCertified Information Systems Security Professional
  • CCSPCertified Cloud Security Professional
  • CISSOCertified Information Systems Security Officer
  • ISO/IEC 27001ISO/IEC 27001 Lead Auditor
  • ISO 22301ISO 22301 Lead Auditor, business continuity
  • ISMS officer per PN‑ISO/IEC 27001
  • IBM QRadarIBM QRadar SIEM and Vulnerability Manager
  • Check PointCheck Point Certified Security Administrator
  • Check PointCheck Point Certified Security Expert

Penetration testing

  • OffSecOffensive Security Certified Professional
  • EC-CouncilCertified Ethical Hacker

Project and IT management

  • PRINCE2PRINCE2 Practitioner and Foundation
  • PMPProject Management Professional
  • AgilePMAgilePM Foundation
  • ITILITIL Foundation, IT service management
  • M_o_RManagement of Risk
  • MoPManagement of Portfolios
  • MoVManagement of Value
  • MSPManaging Successful Programmes

Scale and experience

We’ve been building our expertise for 7 years, including on projects for institutions where the stakes are highest.

More than 200 organisations and companies have trusted us, including 110 public bodies and local governments. Over 30 certified auditors and experts work for them, and we have trained more than 20,000 users on our platform.

  • NBPNarodowy Bank Polski

    A cybersecurity project delivered with NASK.

  • PFRPolish Development Fund

    A project delivered with the National Cloud Operator.

  • PSEPolskie Sieci Elektroenergetyczne

    A project delivered with CGI.

Trusted by

See references
  • PSE
  • PGE
  • ZUS
  • Polish Development Fund
  • Polish Space Agency
  • Educational Research Institute
  • CERRAD

How we work

The same principles apply to audits, rollouts and ongoing support.

A FortCyber consultant discusses a report with the client’s management and IT department
  • We understand first

    We learn how your organisation works, its obligations and key processes. Only then do we define the scope of work.

  • We speak plainly

    Every service ends with a document and a walkthrough of the results. We separate business risk from formalities. If the result is good, we say so.

  • We plan for the long term

    We plan rollouts around everyday work. We keep registers, reviews and reports going so the system stays up to date.

We don’t run IT or sell hardware.

That’s why our assessment is independent of the provider who runs your systems. We recommend what you need, not what we have to sell.

We share knowledge

We run webinars with experts and write guides for management, IT and ISMS officers.

Guides in the knowledge base
A FortCyber trainer runs a phishing awareness workshop for staff

Meet the team that will run your security

At the meeting:

  • you’ll meet the manager and ISMS officer who will work with you
  • we’ll show you how we work together on the platform
  • we’ll agree where to start in your situation

Incident in progress? Call +48 699 587 010

Full consent wording and data protection information

I consent to the processing of my personal data by iTrust sp. z o.o., with its registered office in Warsaw (00-689), ul. Poznańska 37, for the purpose of responding to my enquiry and conducting further correspondence related to it.

I also confirm that I have been informed of my right to request from the controller access to my personal data and its rectification or erasure (“right to be forgotten”), restriction of processing and data portability, my right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (UODO) – and my right to object to the processing of data for the direct marketing of iTrust sp. z o.o. products and services, in accordance with Art. 15.1 GDPR (2016/679).

The controller of the personal data provided in this form is iTrust sp. z o.o., with its registered office in Warsaw (00-689), ul. Poznańska 37. To exercise data subject rights, contact iod@itrust.pl or write to the registered office address.

We’ll get back to you within one working day.