Cyber decisions ready when risk accelerates

Adrien Murillo, référent intervention cyber pour conformité, incident et résilience

NIS2, DORA, CRA, risk analysis, ransomware recovery and DevSecOps automation: we frame, prioritize and execute with your teams, without jargon.

Send a cyber request Explore resources

Pragmatic approach Business-focused

Clear decisions Measurable and traceable

Durable resilience Designed to be maintained

Adrien Murillo

Cyber advisory, compliance and resilience

Discovery audit output

Priorities, evidence, 90-day trajectory

Decision ready

Scoped gaps

Prioritized risks

Auditable evidence

Indicative preview of what your teams recover: an actionable reading, not a decorative report.

Competency evidence

Certifications, field work and verifiable deliverables

ISO 27001 Lead Auditor

ISMS, audits, evidence and continuous improvement

NIS2 Lead Implementer

Governance, compliance roadmap and responsibilities

Cloud DevOps Engineer

Automation, CI/CD, infrastructure and secure operations

Regulatory framing

NIS2, DORA, CRA and ISO 27001 are translated into scope, controls and evidence.

Useful when leadership needs a clear 30/60/90-day roadmap.

View service

Risk analysis

EBIOS RM and ISO 27005 support decisions tied to business impact.

Useful when security backlogs need defensible prioritization.

View service

Recovery and continuity

Ransomware, BCP/DRP and crisis routines are prepared before pressure peaks.

Useful when restoration order and evidence preservation matter.

View service

DevSecOps automation

Controls are turned into CI/CD, IaC, MCO/MCS and runbook routines.

Useful when teams need controls they can actually maintain.

View service

Concrete support for regulated and operational cyber risk

NIS2 / DORA / CRA compliance

Gap analysis, compliance steering and preparation for evidence-based reviews.

Regulatory risk under control, with stronger stakeholder confidence.

EBIOS RM risk analysis

Structured workshops and analysis to prioritize risks and plan suitable treatments.

Clearer risk decisions and better-targeted cyber investments.

Ransomware recovery and BCP/DRP

Preparation, response and recovery work to protect operational continuity.

Reduced downtime, with protected operations and reputation.

DevSecOps automation

Security integration in CI/CD pipelines and automation of control routines.

Shift-left security, faster delivery and maintainable controls.

From first framing to operational routines

›

Understand

Understand your context, constraints and ecosystem.

›

Assess

Assess maturity, risks and the current compliance position.

›

Plan

Define a prioritized roadmap aligned with business objectives.

›

Implement

Deploy pragmatic, measured and maintainable actions.

Steer

Track indicators and continuous improvement for durable resilience.

Discovery call

Clarify the risk before committing budget

The first exchange identifies the deadline, scope, standards, urgency and expected decisions. You receive a simple first reading of priorities.