Services
Four services, one goal: security you can measure.
Every assignment starts from your real need and ends with concrete deliverables.
01
ISO 27001 ISMS and risk assessment
- Your need
- Get or keep ISO 27001 certification, or meet NIS2 and DORA requirements.
- What I do
- Gap assessment against ISO 27001:2022, ISO 27005 or EBIOS RM risk assessment, policies and procedures, preparation for internal and certification audits.
- What you get
- A usable risk assessment, a Statement of Applicability, a risk treatment plan and an audit-ready ISMS.
02
CISO support
- Your need
- An overstretched CISO, or no full-time CISO at all.
- What I do
- Hands-on support or part-time CISO: governance, access and privileged access reviews (IAM, PAM), third-party risk (TPRM), awareness and crisis exercises.
- What you get
- A security roadmap that is actually followed, documented decisions and security built into projects.
03
Security steering and coordination
- Your need
- Make security readable for leadership and get several teams moving.
- What I do
- Security committees, KPIs and Power BI dashboards, reporting to CISOs and executive committees, in French or English.
- What you get
- Regular committees, tracked action plans and auditable minutes.
04
Vulnerability management
- Your need
- Thousands of findings from scanners, and few actual fixes.
- What I do
- Risk-based analysis and prioritisation, remediation tickets, patching follow-up, exception management, end-of-support systems tracking.
- What you get
- A smaller, prioritised backlog, justified exceptions and clear compliance reporting.
Tools : Archer GRC, ServiceNow, Brinqa, Qualys, Tenable, Tanium, CyberArk, Power BI.
Frameworks : ISO 27001:2022, ISO 27005, EBIOS RM, NIS2, DORA, NIST CSF, GDPR, ANSSI guidelines.
Contact me