Cyber Resilience Act reporting duties start on 11 September 2026
infopol
ISO 27001 · E-ITS · NIS2

We keep your E‑ITS 2026 information security system running

  • we take responsibility for E-ITS compliance
  • we prepare the documents and train your employees
  • we provide monitoring and incident management
Try for free
infopol.ee
We keep your E‑ITS 2026 information security system running
What the service includes

Everything the auditor needs is available and up to date.

We agree the scope of work and price before we start. Required training and document updates are included.

Policies and documents
Documents are prepared for your company's needs. Current versions and review dates are always visible.
Security training and drills
We deliver training and practical drills on site or online. Attendance is recorded automatically, and the register can be exported as audit evidence.
Simple employee access
Add employees through Microsoft or import them from Excel. No separate registration is needed, and the email invitation links directly to their documents and training.
Incident register and response
Notifications, actions, deadlines, and required evidence are kept in one place.
External information security manager
Appoint one of our employees as your information security manager in RIA.
Support during the audit
We prepare the required answers and evidence and answer the auditor's questions alongside you. If the agreed outcome is not achieved, we refund the fee.
Comparison

How Infopol improves day-to-day work.

Information security manager
With Infopol:A named information security manager whom you can appoint as the responsible person in RIA.
On your own:Recruiting a dedicated employee at a cost of €4,000 or more per month.
Annual employee training
With Infopol:Training is planned and delivered, with attendance recorded.
On your own:You organise the training, send reminders, and track attendance yourself.
Document management
With Infopol:All documents are kept in one place, with a current version and review date.
On your own:Files are spread across folders, inboxes, and computers, often in several versions.
Employee acknowledgements
With Infopol:Each employee's acknowledgement is available and exportable as audit evidence.
On your own:You have to search email threads or ask employees to confirm again.
Incident response
With Infopol:A clear workflow keeps deadlines, notifications, and evidence in one place.
On your own:You have to work out the required actions and deadlines while the incident is already under way.
Service price
With Infopol:The scope of work and price are agreed before we start.
On your own:Hourly costs and the amount of work can grow during the engagement.
Support during the audit
With Infopol:We prepare the answers and evidence and stay by your side during the audit.
On your own:Finding the materials and answering the auditor's questions is left to you.
See how Infopol works

Three short overviews. Each takes less than a minute.

01 · Action plan

Choose a framework and get a clear action plan.

Choose ISO 27001, E-ITS, or NIS2. See immediately which requirements are met and which still need work. Every action has an owner and a deadline.

Choose a framework and get a clear action plan.
Policies, acknowledgements, and training in one system.
02 · Documents and training

Policies, acknowledgements, and training in one system.

Send policies to employees, collect acknowledgements, and keep training records. All the evidence you need is added to the register automatically.

03 · Incidents

The next steps are clear when an incident occurs.

Log the incident, follow the action plan, and meet the reporting deadlines. The required register updates automatically as the work progresses.

The next steps are clear when an incident occurs.
Customer story

How Infopol makes a customer's day-to-day work easier.

“

Clear advice, the work delivered on time, and everything documented the way an auditor expects. Easy people to deal with. We always knew where we stood.

Nordista OÜ
Managing director
Infopol helps with
✓E-ITS requirements and evidence management
✓Regular employee training
✓Named information security manager and incident register
Why now

Organising information security is the company's responsibility.

A company within the scope of the Cybersecurity Act is responsible for organising the security of its systems and implementing the necessary measures. Compliance is easier to demonstrate when activities, documents, and responsibilities are kept consistently up to date.

If you are unsure whether the requirements apply to your company, ask us. The initial assessment is free.

Section 6 of the Cybersecurity Act. Principles for ensuring cybersecurity.
Cybersecurity Act § 6 — Cybersecurity Act in Riigi Teataja
Questions we get

Clear and straightforward answers.

Get a clear action plan and a fixed price.

Tell us briefly about your situation. We will review the work required and provide a written proposal with a timeline and guarantee terms. If Infopol is not the right partner for you, we will say so honestly.

Get in touchSee pricing