PLEN
Book a meeting
Menu
Incident in progress?Call +48 699 587 010
  1. FortCyber
  2. Platform
  3. ISMS management

The board sees compliance, the team sees its tasks Risks, roles, procedures and deadlines no longer live in Excel and e-mail. Documentation stays up to date.

  • risk register and treatment plan
  • roles, tasks and deadlines
  • decision history and evidence
Book a platform demo See the NIS2 Implementation package
Illustration · sample data

An ISMS someone actually runs

Word and Excel templates won’t remind you of a deadline or show who made a decision. On the platform every duty has an owner, a deadline and a history.

Risk register and risk treatment plan
assessment, owner, management decision with the security manager’s recommendation, and actions with deadlines
Roles and responsibilities
duties assigned to people and roles: who is accountable, who does the work, who approves
Procedures and documentation
policies, procedures and their versions plus the statement of applicability; the FortCyber team keeps them up to date with regulations
Tasks and deadlines
owner, deadline, automatic reminders and progress tracking; an annual ISMS plan with every activity
Reviews and board reporting
management reviews, compliance level and decision history

Who does what

The FortCyber team runs the system, and you approve and carry out tasks.

  1. ISMS officerRuns the system

    Coordinates the duties set by the board and watches deadlines.

  2. Security managerRecommends decisions

    Coordinates tasks and reports to the board.

  3. ISMS Office and auditorsMaintain documentation

    Update the system and carry out reviews and internal audits.

  4. Your organisationApproves and carries out

    Management decides, process owners carry out tasks.

Compliance you can demonstrate

The platform continuously collects the documents and evidence that auditors, business partners and regulators ask for, with no need to prepare them before an inspection.

Risk register and risk treatment plan
assessment, owner, management decision and actions with deadlines
Statement of Applicability
ISO/IEC 27001 controls with implementation status and evidence from devices
Annual ISMS plan
every activity with a deadline and an owner
Incident reporting
KSC deadlines of 24 h and 72 h from detection, a separate data protection path
Technical policies
results from devices: met, not met, exceptions
NIS2 ImplementationWhen you don’t have an ISMS yet. Cybersecurity OutsourcingWhen you want our team to run the system.

See the ISMS module on sample data

In the presentation we’ll show:

  • the risk register and risk treatment plan
  • roles, tasks and reminders
  • the management review and board report

The presentation is run by a FortCyber consultant with experience as a security officer.

Incident in progress? Call +48 699 587 010

Full consent wording and data protection information

I consent to the processing of my personal data by iTrust sp. z o.o., with its registered office in Warsaw (00-689), ul. Poznańska 37, for the purpose of responding to my enquiry and conducting further correspondence related to it.

I also confirm that I have been informed of my right to request from the controller access to my personal data and its rectification or erasure (“right to be forgotten”), restriction of processing and data portability, my right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (UODO) – and my right to object to the processing of data for the direct marketing of iTrust sp. z o.o. products and services, in accordance with Art. 15.1 GDPR (2016/679).

The controller of the personal data provided in this form is iTrust sp. z o.o., with its registered office in Warsaw (00-689), ul. Poznańska 37. To exercise data subject rights, contact iod@itrust.pl or write to the registered office address.

We’ll get back to you within one working day.