one-off service
Cyber Audyt
A full picture of how prepared your organisation is to protect information and comply with the law.
Audit if you already have documentation or an inspection calls for evidence. Cyber Check 360 if you need a quick map in 1-2 days.
Who it’s for
- organisations that want a comprehensive assessment of their information security
- companies and institutions that want to confirm compliance with regulations, the NIS2 Directive and ISO 27001
- organisations that want to check their readiness for ISO 27001 certification
- boards that want solid grounds for their decisions
The FortCyber security audit is a comprehensive assessment of how well information and IT systems are protected and how ready the organisation is for regulatory requirements, including NIS2. It is a service for organisations that want to know exactly where they stand, so they can confirm their readiness or make further investment or operational decisions.
What it covers
We carry out the audit in a hybrid way (organisation + technology), because only this approach gives a true picture of the situation.
Organisational audit
- review of security and risk management documentation,
- assessment of roles, responsibilities and decision-making processes,
- verification of evidence that work follows security rules,
- analysis of compliance with ISO/IEC 27001, the KSC Act, the National Interoperability Framework (KRI) and NIS2,
- review of supplier relationships and the supply chain (third-party risk).
Technical audit
- analysis of the IT environment architecture,
- assessment of key safeguards: access management, updates and vulnerabilities, backups and business continuity, monitoring and incident response,
- where needed, extension to technical tests (vulnerabilities, phishing).
Physical security review
- rules for access to premises,
- procedures for access to physical information assets.
Process
- Kick-off and initial analysis: gathering information about the organisation and its environment.
- Review of documentation and configuration.
- Interviews with key people.
- Identification of gaps and non-conformities.
- Final report and a meeting with the board.
The process is structured, predictable and safe for the production environment.
What you get
- a gap and non-conformity report (gap analysis) referencing the KSC Act / KRI / NIS2 / ISO 27001
- a prioritised action roadmap: quick fixes and strategic actions
- a board meeting: results in business language, real risks and a recommended way forward
Let’s talk about your organisation
The first call is free. We’ll get to know your situation and suggest a specific next step.