Cybersecurity and resilience
Incident response, fractional CISO, audit and hardening, NIS2 and DORA compliance: one offer to keep running, whatever happens.
Talk to the founder- Incident response: ransomware, intrusion, data leak, production down. Containment, investigation, return to service, written post-mortem.
- Fractional CISO: risk mapping, security policy, vendor security and a dashboard your board can actually read.
- Audit and hardening: review of cloud, network, endpoints and email, with a prioritised and costed remediation plan.
- NIS2, DORA and ISO 27001 compliance: gap analysis, roadmap, evidence pack and preparation for inspections.
- Continuity and recovery: backups verified by an actual restore, a tested recovery plan, crisis scenarios rehearsed before you need them.
The work happens before the crisis
Most of the value is created cold: knowing what is exposed, who decides, who calls whom, and which backups actually restore. A crisis is won on that preparation, not improvised on the day.
A senior contact, not a ticket
When it hits, you talk to someone who decides. Response times and on-call terms are written into the contract and calibrated to your risk level, not to a brochure.
Delivery follows the advice
When getting back online needs hands and infrastructure, it is delivered with Premaccess, the sister company and managed-services operator, so you are not re-assigning the problem to a third party at the worst moment.
What is left behind
Applied fixes, written procedures, a tested recovery plan and dated checkpoints. Not an eighty-page report that ends up in a drawer.
French industrial group (multi-site): fractional CIO — weekly operations steering, infrastructure reliability, cloud and AI framing, board committees.
French leader in refurbished-smartphone rental: migration assessment based on reading the actual code, funded by AWS MAP, then a priced modernization path (managed AWS services, domain-by-domain migration).
We are under attack right now, what do we do?
Write to us through the form with the word incident in the subject: those requests jump the queue. Meanwhile, two reflexes: isolate without wiping, and do not restart everything. Evidence destroyed in the first reflex is missing later for the investigation, the insurer and the police report.
Do we need a full-time CISO?
Rarely below a few hundred people. A fractional CISO covers governance, trade-offs and follow-up for a fraction of the cost, and will tell you when the workload justifies an internal hire.
Does NIS2 apply to us?
The scope is far wider than the previous directive: around fifteen thousand French entities, including companies caught because they supply a regulated sector. The French transposition, carried by the Resilience bill, was still going through parliament in summer 2026. A gap analysis settles your case in a few days, and the useful work does not depend on the final date of the text.
Do you work with our current provider?
Yes. We work alongside your teams and your providers, and do not replace them on principle. Part of the job is in fact checking what your managed-services contract actually covers on security, contract in hand.
Let's talk about your situation.
A 30-minute call with the founder, no strings attached. Reply within 24 business hours.
Your details are used only to answer your enquiry: never sold, never used for cold outreach. Privacy policy.