- FortCyber
- How we work
How we work. From assessment to everyday readiness
The first two steps happen once. The next two run continuously and are handled on the platform, where you see every action taken. You start from where you are.
From assessment to everyday readiness
The packages are successive stages of the same path. Choose what you already have and we’ll show you which step we start from.
Where are you starting from?
We start at step 1: Assessment. The audit will show what’s already in place and what’s missing.Step details
Assessment
We assess security and compliance: documents, processes, infrastructure. You get a list of gaps and an action plan.
- On the platform: the plan immediately as a task list.
Rollout
We establish the ISMS and business continuity, assign roles and prepare staff.
- On the platform: risk register, roles and procedures.
Ongoing cycle on the platformlive · steps 3 and 4 ongoing
Maintenance
We run procedures, reviews and training, and respond to incidents.
- Team: the manager coordinates tasks and reports to the board.
- Platform: agents check devices; tasks have owners and deadlines.
Audit readiness
Every action leaves evidence — ready for the auditor, business partners and the board.
- Team: keeps documentation current and supports contact with authorities.
- Platform: change history, reports and complete documents in one place.
What happens at each step
What we do, what you do, what stays on the platform and how long it takes.
-
What we do
- free initial call and scoping
- review of documentation and configuration
- interviews with key people
- gap report with references to regulations, and an action plan
- meeting with the board
What you do
- you share documents and name people for interviews
- you approve the action plan
On the platform
the action plan straight away as a task list with owners and deadlines
-
What we do
- risk analysis and risk treatment plan
- policy and operational documentation
- roles, procedures and business continuity
- preparing staff and management
What you do
- you appoint people and approve documents
- you accept the risks and the treatment plan
On the platform
risk register, roles, procedures and versioned documents
-
What we do
- the manager coordinates tasks and reports to the board
- the ISMS officer runs the ISMS: risks, reviews, internal audits
- training and campaigns for staff
- incident response and reporting
What you do
- you make decisions in the management dashboard
- IT carries out fixes from tasks
On the platform
agents and automations, tasks with owners, notifications to the right people
- 4
Audit readiness
ongoing, on the platformin every Outsourcing scopeWhat we do
- we update documentation after every change
- we prepare you for audits and inspections
- we support you in dealings with authorities
What you do
- you can generate a report for the board, an auditor or a business partner at any time
On the platform
action history, reports and a complete set of documents in one place
Who does what
Every role on your side knows what’s expected of it. We and the platform handle the rest.
| Role | 1. Assessment | 2. Rollout | 3. Maintenance | 4. Audit readiness |
|---|---|---|---|---|
| FortCyber team | audit and gap report | risk analysis, documentation, training | manager and ISMS officer, reviews, incident response | documentation updates, audit preparation |
| Platform | plan as a task list | risk register, roles, documents | agents, automations, notifications | action history and reports |
| Management | approves the action plan | approves risks and documents | decisions and oversight in the management dashboard | a report at any time |
| IT and IT admins | shares configurations | implements security controls | carries out fixes from tasks | proof of completion in the history |
| ISMS officer or person in charge | identifies documents and processes | co-authors procedures | handles duties together with the manager | point of contact for audits and inspections |
| Staff | takes part in interviews if needed | induction training | training and campaigns | training completion records |
How ongoing support works
The platform works around the clock, and experts step in where human judgement is needed.
- Agent reports
Agents on devices report status and events continuously.
- Platform rates
Automations rate the severity of an event without waiting for a human.
- The right person gets a task
IT, the asset owner or the ISMS officer, depending on the event.
- An expert consults
A FortCyber analyst advises when an assessment or decision is needed.
- Evidence remains
A closed task goes into the action history and reports.
The first weeks of working together
From the first conversation to the first report on the platform.
- First call
We get to know your organisation and agree on a starting point.
- Scope and contract
Scope, package and price set out upfront.
- Platform and roles
We set up accounts and assign people to roles.
- Agent installation
IT installs the agents with our help.
- First report
Security status and first tasks.
Questions about working with us
Can’t see your question?Call +48 699 587 011 or book a meeting.
Do we have to go through all the steps?
No. You start from where you are. If you have a recent audit, we start with the rollout; if you have a working ISMS, with ongoing support.
Can we stop after the audit?
Yes. You can implement the report and action plan yourselves. The plan stays on the platform as a task list.
Who is our point of contact?
The security manager. Coordinates the FortCyber team’s work, keeps track of deadlines and reports to management.
What does reporting look like?
You can generate reports on the platform at any time: security status, compliance, tasks and action history.
Who is responsible for security when we work with you?
We take on the workload, but responsibility stays with the head of the organisation. That’s why every decision and every action is documented.
We’ll work out which step to start from
At the meeting:
- we’ll check what you already have: audit, documents, people
- we’ll identify your entry step and package
- we’ll show you the platform with sample data
Incident in progress? Call +48 699 587 010
We’ll get back to you within one working day.