Pole 05

Governance, risk and compliance

We build organisational security with you on the basis of documented analysis, not assumptions. Risk treatment decisions belong to your organisation; we give you the elements to make them.

Areas of work

Maturity assessment

Objective measurement of your current protection level against a defined benchmark. Identification of priority improvement areas taking your business context, resources and exposure level into account. The output distinguishes what is urgent, what is important and what is desirable.

Compliance

Gap analysis between your current state and applicable requirements. Compliance plan with milestones, owners and expected evidence. Support through the remediation phase and preparation for audit interviews.

Certification preparation

Building the certification dossier, mock audit simulations, training teams on assessment questions. We handle preparation; certification itself is issued by an independent third-party body.

Cyber strategy and programme

Definition of a security strategy aligned with business objectives. Translation into a multi-year action programme with budget arbitration. Programme governance: indicators, review points, adjustments.

Business impact analysis

Identification of critical processes and their dependencies. Assessment of the impact of unavailability or compromise on operational continuity. Definition of recovery objectives (RPO, RTO) per process.

Shared CISO

An experienced security officer operates part-time within your organisation: operational security management, reporting to the executive team, incident management, security project oversight. Suited to organisations that do not yet justify a full-time position.

Our ISO/IEC 27001 approach

CyberAar is building its own information security management system aligned with ISO/IEC 27001:2022. Certification is underway. This is not a commercial argument: it reflects our commitment to applying to our own systems the requirements we recommend to our clients.

Discuss your project All services