ReCyF/NIS2: turn ANSSI measures into auditable evidence
A practical briefing to turn the ANSSI ReCyF reference into scope, controls, owners and evidence for NIS2 preparation.
Read the guideResources
Resources to decide and act
We bring together short guides, selected monitoring and practical exercises to help your teams move from a signal to action.
Operational content
Guides and operational references
Content designed to frame a discussion, prepare a workshop or check initial priorities.
21 guides displayed.
Compromised processor: decisions, evidence and GDPR notification
A practical briefing on supplier-side data breaches: decisions, evidence, controller/processor coordination and CNIL notification.
Read the guideNIS2 for SMEs and mid-market organizations: what to frame first
A practical briefing for scoping NIS2 obligations, evidence and a 30/60/90-day compliance roadmap.
Read the guideDORA and digital operational resilience: avoid off-ground compliance
A practical briefing for connecting DORA requirements to ICT services, third parties, testing and recovery evidence.
Read the guideCRA: prepare product cybersecurity before the deadline
A practical briefing for preparing CRA product cybersecurity, vulnerability handling and evidence before the 2026/2027 milestones.
Read the guideVulnerabilities: prioritize fixes by exposure and business risk
English briefing of the French source guide, focused on scope, evidence, decisions and practical next actions.
Read the guideCyber incident kit 24/48h: decide, preserve evidence and recover safely
English briefing of the French source guide, focused on scope, evidence, decisions and practical next actions.
Read the guideCompromised Microsoft 365 account: mailbox, sessions and remaining access
English briefing of the French source guide, focused on scope, evidence, decisions and practical next actions.
Read the guidePrioritize exploited vulnerabilities without relying only on CVSS
English briefing of the French source guide, focused on scope, evidence, decisions and practical next actions.
Read the guide90-minute cyber crisis tabletop: reveal real dependencies
English briefing of the French source guide, focused on scope, evidence, decisions and practical next actions.
Read the guideTypical SME ransomware case: the first 48 hours that matter
English briefing of the French source guide, focused on scope, evidence, decisions and practical next actions.
Read the guideKYPO CyberRange: design a realistic and measurable cyber exercise
English briefing of the French source guide, focused on scope, evidence, decisions and practical next actions.
Read the guideTypical case: unmanaged remote access from VPN to internal pivot
English briefing of the French source guide, focused on scope, evidence, decisions and practical next actions.
Read the guideTypical case: data leak after mailbox or CRM compromise
English briefing of the French source guide, focused on scope, evidence, decisions and practical next actions.
Read the guideTypical case: supplier or SaaS compromise as your incident
English briefing of the French source guide, focused on scope, evidence, decisions and practical next actions.
Read the guideSME cyber audit: prepare a useful and actionable diagnostic
English briefing of the French source guide, focused on scope, evidence, decisions and practical next actions.
Read the guideRansomware recovery: prepare BCP/DRP, backups and crisis decisions
English briefing of the French source guide, focused on scope, evidence, decisions and practical next actions.
Read the guideM365: Conditional Access, MFA and sensitive accounts without blind spots
English briefing of the French source guide, focused on scope, evidence, decisions and practical next actions.
Read the guideCyber backups: prove restoration before ransomware
English briefing of the French source guide, focused on scope, evidence, decisions and practical next actions.
Read the guideCyber evidence log: keep what makes a decision defensible
English briefing of the French source guide, focused on scope, evidence, decisions and practical next actions.
Read the guideCritical asset mapping: prepare NIS2 with business evidence
English briefing of the French source guide, focused on scope, evidence, decisions and practical next actions.
Read the guideLab
Understand a control by handling it
The Lab provides an interactive network decision exercise directly in the browser.
Open the LabFor technical teams
Technical projects
Our public repositories remain available to specialists who want to inspect architecture and implementation choices. They contain no client code.
View technical projects