Within the 18 topics, Fost Plus distinguishes between a standard level and two more advanced levels. "This categorization is based on a framework Inetum developed, inspired in part by European NIS guidelines for cybersecurity," explains Shanna Cloet. "The elements at the standard level are things you must address. If you don’t, you expose yourself to various cyber risks."
Additionally, Fost Plus identified a number of quick wins based on its score in each of the 18 topics. This enabled the organization to define nine concrete, well-defined projects. After delivering the roadmap at the end of 2022, Fost Plus began implementing these projects. By 2023, successful projects had already been completed around user awareness, penetration testing, and monitoring. In 2024, disaster recovery, identity and access management (IAM), and vulnerability management were on the agenda. For 2025, asset management, risk management, and data classification are planned.