Services · Security management
Security management in one place: you always know where you stand, what to do next and what to show a customer or an authority.
NIS2, customers’ security questionnaires and the board’s questions all ask for the same thing: evidence that security is under control. Often it is scattered across spreadsheets, emails and one person’s head.
The Security Folder brings it all together: controls, policies, risks, suppliers, incidents and tasks. Each control counts in every framework it belongs to, so the same work serves NIS2, ISO 27001 and the GDPR.
Automated checks keep watch for you: expiring evidence, overdue reviews, missing data processing agreements, email protection and incident notification deadlines. Foregon’s expert sees the same picture and helps when something falls behind.
Plans
Every plan has the same folder and an expert’s support. You can change the plan at any time, and all your data stays.
The fastest way to get in order, priced per organisation
99 € / monthexcl. VAT
Every security framework and the supply chain, priced per organisation
249 € / monthexcl. VAT
AI governance, audits and a trust centre, priced per organisation
449 € / monthexcl. VAT
Several companies or special needs, priced by quote
Request a quote
What is in the Security Folder
Designed for a small organisation: no consultant jargon, but ready templates, clear tasks and a report that management understands.
56 controls in nine areas and 12 AI governance controls. They cover every clause and all 93 Annex A controls of ISO 27001, NIS2 and the GDPR, and in the Pro plan ISO/IEC 42001, the NIST AI RMF and the EU AI Act. Each one explains in plain words what it means and what counts as evidence, and the evidence is gathered into one package for the auditor.
21 checks keep watch that things stay in order: policies reviewed, evidence current, suppliers reviewed, restores tested, email protection on and AI use under control. Readiness shows its progress day by day.
Nine policy templates in Finnish, Swedish and English, the AI use policy included. The company name fills in by itself, approvals and versions are kept, and every policy prints as a PDF.
A risk map, a ready risk library, a supplier register with data processing agreements and an asset inventory with owners. Staff onboarding, leavers and policy acknowledgements come along. Everything exports to Excel.
When something happens, the Security Folder works out the deadlines: an early warning within 24 hours, a notification within 72 hours and a final report within a month, plus the Data Protection Ombudsman’s 72 hours.
A secret link you can give a customer instead of filling in a security questionnaire. The page shows readiness, approved policies and subprocessors, only what you choose.
Frameworks
The controls are linked to the requirements in advance. When you mark a control as in place, it shows in every framework. The Pro plan adds the AI frameworks: ISO/IEC 42001, the NIST AI RMF and the EU AI Act.
Law
The ten areas of risk management (Article 21), management responsibility and training (Article 20) and the duty to report incidents. Includes a self-assessment and a board report.
Standard
Annex A controls linked to the Security Folder controls. A draft Statement of Applicability is one click away, justifications included.
Privacy
Data processing agreements, the record of processing, data subject rights and the 72-hour duty to report, in the same folder as the rest of your security work.
How to get started
You get accounts for My Foregon. The Security Folder guides you with eight starting steps, and nothing needs installing.
You fill in the NIS2 self-assessment and set the status of the controls. Ready risks and suppliers are added with one click.
You adopt the policy templates, edit and approve them. The gaps become tasks with owners and due dates.
The checks tell you when something needs attention. A status report for management prints at any time, and an expert goes through the yearly review with you.
Trust
The self-assessment and the checks are not a certification, but they are the groundwork for preparing for a certification or an authority’s questions.
Frequently asked
Organisations that NIS2 covers directly or through the supply chain, and those whose customers ask about security. Typically companies and associations with 10–250 people.
No. The controls and policies are written in plain words, and Foregon’s expert sees the same picture. The expert can add recommendations to your folder and help when something falls behind.
The Security Folder remembers for you: it tells you when a review is due, evidence expires or an incident deadline is close. On top of that, the same work shows in every framework and the report for management is one click away.
Certification is always granted by an external certification body. The Security Folder helps you build and maintain the management system, and the draft Statement of Applicability and the evidence are ready for the audit.
Only what you choose: readiness by framework, controls by area, the names of approved policies and the subprocessors you mark to be shown. Notes, risks and incidents are never shown.
The folder becomes read-only, and you can export everything to Excel and PDF. With a new contract you continue where you left off.
Tell us what is on your mind and we will listen. The first call is free and you are not committing to anything. At worst you get a few good tips, at best a partner who takes care of your company's security.