Time-consuming, error-prone, and barely scalable
GObugfree wanted to build its ISMS professionally without unnecessary complexity. Maintaining it with Excel, Word, and PowerPoint was time-consuming, error-prone, and barely scalable. At the same time, they needed a solution that clearly structures the ISO-27001 process and integrates seamlessly into their workflows.
High transparency and reliable proof
With fortControl, GObugfree has centralized, structured, and largely automated risks, measures, and responsibilities. The platform provides continuous support, from risk assessment and tracking of measures to visualizing connections and preparing for audits. Result: Significant time savings, high transparency, and reliable proof at all times for regulators, customers, and partners.
Benefits at a glance
-
Transparency and traceability
Information security is clearly visible at all times through centralized control of risks, measures, and responsibilities, as well as visualization of interconnections.
-
ISO-27001 certification readiness
Structured support in the certification process and consistently available, reliable documentation. Ideal for audits and external reviews.
-
Added value for customers and partners
Demonstrable professionalism in dealing with information security.
“With fortControl, we quickly built our ISMS and can easily keep it up to date. It was a simple and effortless experience. A real timesaver.”
Marcel Eyer Co-CEO, GObugfree In conversation with Marcel Eyer, Co-CEO of GObugfree
Why did GObugfree decide to introduce the fortControl ISMS platform, and what were your main goals?
We wanted to build our information security management system (ISMS) professionally, but without unnecessary complexity. Our goal was to find a solution that supports the ISO 27001 process in a structured way while fitting into our agile day-to-day work. With fortControl we were able to do exactly that: an efficient, practical ISMS that is a perfect fit for a growing company of our size.
Which problems did fortControl solve?
Before fortControl, we maintained our ISMS documentation largely in Excel, Word and PowerPoint. This manual approach was time-consuming, error-prone and hardly scalable. With fortControl we were able to centralise, structure and automate all relevant processes – from risk assessment to tracking measures. That helped us considerably, not only during the build-up but also during the ISO 27001 audit.
What benefits do you get from fortControl?
For us, the biggest benefit lies in the time saved and in the clarity it provides. We save an enormous amount of effort in setting up and running our ISMS. At the same time, we meet the requirements of regulators, customers and partners more efficiently and can provide evidence transparently at any time. This creates clarity and trust internally, and demonstrable professionalism in handling information security externally.
How do you use fortControl?
We use the platform to manage risks, measures and responsibilities centrally. This keeps us informed about the status of our ISMS at all times and lets us trace developments or adjustments quickly – particularly as part of our continuous improvement process under ISO 27001.
Which features do you use regularly?
The features we use most are:
- Risk management
- Tracking of measures
- Visualisation of the overall relationships within the ISMS
These features are essential for our daily work and ensure a high level of transparency and traceability across the entire security management.
How do you experience working with fortControl – for example in support or further development – and which features would you like to see in the future?
Working with fortControl is straightforward, fast and personal, which we appreciate a lot. Support responds quickly and in a solution-oriented way, which helped us enormously during audit preparation. For the future we would like to see even more best-practice templates and extended automation features to reduce operational effort further.