title line 1 title line 2 subtitle

Any company using IT systems or handling sensitive data would be well advised to audit its infrastructure in order to protect itself and its customers. Others are subject to regulations or contractual obligations that require them to carry out regular IT security audits to demonstrate compliance with the measures agreed with their customers.
Audits help to protect your data, ensure compliance with your legal obligations and, above all, identify organisational and technical vulnerabilities within your organisation. If you have never audited your systems, now is the time to do so.

Many factors come into play: the size of your organisation, its profile and its level of exposure to threats are key considerations. Depending on these factors, you may wish to prioritise an assessment of the external threats you are potentially exposed to and then gradually move on to analysing internal threats. We recommend that you use our self-assessment tools to start your analysis.

DORA and NIS2 are two major pieces of EU legislation aimed at strengthening organisations’ cybersecurity and digital resilience.
NIS2 (Network and Information Security 2) replaces the first European directive (NIS). Its aim is to raise the overall level of cybersecurity across 18 critical sectors (energy, transport, healthcare, water, public administration, digital services, etc.).
DORA (Digital Operational Resilience Act) is a European regulation applicable to the financial sector. It aims at guaranteeing the integrity and availability of the financial sector’s IT systems in the event of a cyberattack or a major incident. This applies to financial institutions (banks, insurance companies, financial markets) as well as their third-party ICT service providers (such as cloud hosting providers).
If your company operates in these sectors, you are very likely affected by these standards. If in doubt, please contact us to clarify your situation.

All businesses, across all sectors, must comply with the GDPR. Although its scope largely focuses on privacy, Article 32 imposes a strict cybersecurity obligation on any organisation that processes personal data (employees, customers, suppliers). There is also the Cyber Resilience Act, which aims at raising the level of cybersecurity for all products containing digital components placed on the European market, whether they are hardware, software or hybrid solutions. It requires organisations to incorporate cybersecurity from the design stage (‘security by design’) and to ensure it throughout the product’s lifecycle. Depending on your industry, you may need to comply with NIS2 or DORA. More recently, the AI Act (Artificial Intelligence Regulation) has come into force and applies to any company that develops or uses artificial intelligence systems.