FortCyber — Cybersecurity Outsourcing: Cyber Care

When outsourcing makes sense

Situations in which organisations most often entrust us with their day-to-day security.

We have no one for security
A full-time CISO doesn’t make sense, but neither does having no one responsible.
Guide
The documents exist, but they’re dead
A years-old policy and a risk register with one entry. Someone has to maintain them.
Guide
ISMS rolled out — what next?
The system only works if someone runs the reviews, tasks and documentation.
NIS2 Implementation
Downtime means losses
You need round-the-clock monitoring and incident readiness.
The role of a SOC
An employee clicked a phishing link
What to do today, and over the next year, so it doesn’t happen again.
Guide

We take on the workload. The accountability stays

The Act allows some tasks to be entrusted to a managed service provider, but the head of the entity remains responsible for them. That’s why everything we do is documented.

The head of the entity remains responsible even after delegating duties

Cybersecurity tasks can be handled in-house or partly outsourced to a managed service provider. The head of the entity remains responsible.

Oversight instead of taking it on trust

decisions for approval with the team’s recommendation
security status reports generated on the platform at any time
an action history — evidence for the auditor, business partners and the regulator
clarity on what was done and what your subscription pays for

Who works for you

The team knows your organisation and answers to you. You see each person’s work on the platform.

Security specialists at workstations with monitors

Security manager
Your dedicated contact: coordinates tasks and reports to the board.
ISMS officer
Separate service: certified in line with Ministry of Digital Affairs guidelines, runs the ISMS on behalf of management and watches over the duties set by the board.
ISMS auditors and consultants
Internal audits, reviews and system updates.
Security analysts
Consult on automated analysis results and recommend fixes.
Lawyers and incident handling
Notifications, documentation and communication during a crisis.
Trainers
Training, social engineering campaigns and simulator exercises.

FortCyber experts

How ongoing support works

Agents installed in your infrastructure monitor its resilience continuously, while platform automations assess events and notify the right people. Experts advise and support, and every step stays in the history.

Report · agentAn agent reports an event
Device status reported around the clock.
Analysis · automationThe platform rates severity
Vulnerabilities matched to the device and prioritised, without waiting for a human.
Entry · notificationThe right person gets a task
IT, the asset owner or the ISMS officer, depending on the event.
Visibility · managementStatus and proof of completion
A closed task goes into the history and the report.

Management events. The same automations track risk review deadlines, overdue tasks and unfinished training.

What “24/7” means. The platform monitors devices automatically around the clock, while the team works during business hours. A round-the-clock SOC team is the Resilience 24/7 add-on.

Ongoing security

Two services and an add-on

Cyber Care maintains compliance after an audit or rollout. The ISMS Officer is a separate service: choose either one or both. Resilience 24/7 with a round-the-clock SOC is an add-on to Cyber Care and is not sold separately.

Service · maintaining compliance

Cyber Care

from PLN 2,500 / month

For organisations after an audit or ISMS implementation that want to meet regulatory requirements on an ongoing basis.

Security manager: a permanent contact and board reports
ISMS Office: documentation kept on the platform
updates for changes to the KSC Act, KRI and ISO 27001
organisational and technical audits 1–2 times a year
vulnerability testing and cyber hygiene
training, phishing tests and awareness campaigns
supply chain and contract clauses
incident coordination and reporting to authorities

Service · responsible person

ISMS officer

from PLN 2,000 / month

When your organisation must have someone responsible for information security but has no one on staff.

ISMS officer appointed by FortCyber, certified in line with Ministry of Digital Affairs guidelines, the right hand of the head of the organisation
coordinating and overseeing ISMS maintenance
internal audits and management reviews
participation in external audits and inspections
decision recommendations, reports and training for the board

Add-on to Cyber Care

+ Resilience 24/7

from PLN 4,500 / month

When downtime means real losses.

SOC 24/7: monitoring, log and alert analysis, anomaly detection
incident handling in line with NIS2, ISO 27035 and ENISA guidelines
post-breach analysis and recommendations
a law firm and notifications to CSIRT NASK and UODO (the Polish data protection authority)
real-time security dashboards

What it covers	Cyber Carefrom PLN 2,500 / month	ISMS Officerfrom PLN 2,000 / month	+ Resilience 24/7from PLN 4,500 / month
Who works on it	Security manager and ISMS Office	an ISMS officer appointed by FortCyber	SOC team, analysts and law firm
Support model	business hours; automated platform monitoring around the clock	business hours	continuous monitoring with a SOC team
Format	mainly remote, meetings online or on site	regular on-site meetings	remote SOC, on-site support during incidents
Audits and reviews	organisational and technical audits 1–2 times a year	internal audits, management reviews, participation in external audits	response plan reviews
Vulnerability testing	regular testing of basic safeguards	—	testing and threat trend analysis
Staff awareness	e-learning, phishing tests, campaigns	board training	—
Incidents	coordinating response and reporting	decision recommendations for management	SOC, handling and post-breach analysis
Legal support	coordinating legal action	—	law firm
Reports	on the platform at any time	board reports	plus real-time dashboards

Request a quote

When an incident happens

The procedure, people and documents are ready in advance. You know who calls, who reports and what needs to be documented.

Deadlines for a major incident

0incident detection
24 hearly warning to the relevant CSIRT, counted from detection
72 hmajor incident notification
1 monthfinal report on incident handling

Every incident must be managed; major ones must be reported.

What we do

In the Cyber Care package

event categorisation and incident identification
coordinating the response and remedial, legal and reputational action
reporting and representing the organisation before authorities

Additionally with the Resilience 24/7 add-on

real-time detection by the SOC
post-breach analysis and preventive recommendations
a law firm and notifications to CSIRT NASK, UODO and supervisory authorities

Response times are set in the contract.Incident in progress? +48 699 587 010

What you get

Predictable costs and ongoing responsibility on our side. You see what was done and what you’re paying for.

Audit readiness every day

continuous documentation and evidence of every step
support during external audits and inspections
support in dealings with authorities

Control over your security level
Status, risks and recommendations in the management dashboard.
Ongoing regulatory compliance
An ISMS kept up to date with regulatory changes.
Support for the board
Risk translated into the language of decisions, and lower liability risk.
Fast incident response
People, procedure and documents ready in advance.
The full platform
Management dashboard, ISMS, agents and console, training and the history of all activities.

Questions about outsourcing

Can’t see your question?Call +48 699 587 011 or book a meeting.

Does outsourcing transfer responsibility to FortCyber?

No. The head of the entity remains responsible even after delegating duties to others. That’s why everything we do is visible on the platform: decisions, tasks and evidence they were carried out.

Can we outsource only some of the tasks?

Yes. The Act allows part of the tasks to be entrusted to a managed service provider. We match the scope to what stays on your side.

Can the ISMS officer be ordered separately?

Yes, the ISMS Officer is a separate service and does not require Cyber Care. If you choose both, they work on the same documentation and platform. Resilience 24/7 with SOC is available only as an add-on to Cyber Care.

Who is the contact person for the CSIRT?

You appoint them. According to the KSC FAQ (3.18), this is a person tied to the organisation by an employment contract or another employment relationship. FortCyber’s security manager supports them and coordinates reports.

Do we need a SOC?

The act does not prescribe specific solutions. If downtime means losses for you, a round-the-clock SOC comes with Resilience 24/7, an add-on to Cyber Care.

We don’t have an ISMS yet. Where do we start?

With implementing the system in the NIS2 Implementation package. Cyber Care maintains it from day one after launch.

What are the contract terms?

Contract term, scope changes and response times are set in the offer, after a conversation about your organisation.

Before you decide

Guides and articles from our knowledge base.

GuideWe have no one in charge of security, but the law requires itRead ArticleFines aren’t everything: what really hurts after an incident?Read ArticleStages of a cyberattack and the SOC’s role in protecting a companyRead ArticleNIS2 and board liabilityRead

First NIS2 ImplementationWhen you don’t have an ISMS yet. Assessment first: NIS2 AuditWhen you want to know where you stand.

Let’s choose your scope of care

At the meeting we’ll establish:

what stays on your side and what we take over
whether your risk calls for an ISMS officer or a SOC
what the first month of working together looks like
we’ll show you the platform with sample data

The meeting is led by a FortCyber consultant with experience as a CISO and security officer.

Incident in progress? Call +48 699 587 010

Full name *

Organisation *

Email *

Phone

Scope

Preferred date

What would you like to hand over?

I accept the terms of the privacy policy.

Full consent wording and data protection information

I consent to the processing of my personal data by iTrust sp. z o.o., with its registered office in Warsaw (00-689), ul. Poznańska 37, for the purpose of responding to my enquiry and conducting further correspondence related to it.

I also confirm that I have been informed of my right to request from the controller access to my personal data and its rectification or erasure (“right to be forgotten”), restriction of processing and data portability, my right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (UODO) – and my right to object to the processing of data for the direct marketing of iTrust sp. z o.o. products and services, in accordance with Art. 15.1 GDPR (2016/679).

The controller of the personal data provided in this form is iTrust sp. z o.o., with its registered office in Warsaw (00-689), ul. Poznańska 37. To exercise data subject rights, contact iod@itrust.pl or write to the registered office address.

We’ll get back to you within one working day.