Resources · Blog
Understand cyber to decide better
-
Data security: protecting your organisation's data in 6 steps Risk analysis · 12 min -
Cyber resilience: why protection is no longer enough GRC · 11 min -
Vulnerability management: the full cycle and how to prioritise Risk analysis · 11 min -
Supermarket cyberattack: what the refrigeration hack reveals Cyber news · 7 min -
Cybersecurity roadmap: building a three-year plan GRC · 12 min -
Ransomware: understanding, preventing and responding to an attack Risk analysis · 12 min -
IT security plan: contents, steps and tools GRC · 11 min -
ISO 31000: principles, framework and process of risk management Risk analysis · 10 min -
Security awareness training: building and measuring a programme GRC · 11 min -
ISO 27701: the privacy information management standard Compliance · 10 min -
CISO and DPO: roles, differences and how they work together GRC · 11 min -
Digital sovereignty: what a sovereign cloud really changes Compliance · 9 min -
Zero trust: principles, architecture and a step-by-step roll-out Risk analysis · 12 min -
TISAX: the automotive security label, assessment levels and process Compliance · 10 min -
Human firewall: turning employees into a line of defence GRC · 10 min -
Risk management: the approach, the roles and the IT case Risk analysis · 12 min -
Regulatory compliance: definition and how to become compliant Compliance · 11 min -
NIST CSF 2.0: the six functions, profiles and tiers GRC · 12 min - Business process mapping: method, example and use in a BIA Risk analysis · 10 min
-
Shadow IT: definition, risks and how to bring it under control Risk analysis · 11 min -
Pentest: penetration testing explained, from black box to TLPT Compliance · 11 min -
IT acceptable use policy: contents, legal value and how it differs from a security policy GRC · 11 min - Third-party risk: what NIS 2 and DORA require Risk analysis · 13 min
- ISO 27035: managing information security incidents Compliance · 10 min
- Cybersecurity compliance management: method, roles and indicators Compliance · 12 min
-
Resilience bill: where does the NIS 2 transposition stand in France? NIS 2 · 6 min - Data breaches in the French State: what Operation REACTIV reveals Cyber news · 8 min
-
Continuous compliance: from the annual audit to permanent control Compliance · 13 min - Ransomware: why VPNs and firewalls are the main way in Cyber news · 7 min
-
CRA: important and critical products, which conformity assessment? Compliance · 13 min - CISO: role, responsibilities and tools GRC · 12 min
- Supply chain attacks: definition, examples and how to protect yourself Risk analysis · 12 min
-
AI Act: obligations for organisations that use AI Compliance · 15 min -
Security assurance plan: securing your service providers by contract Risk analysis · 11 min -
Shadow AI: when AI agents become a cyber risk Cyber news · 8 min -
ISO 42001: the artificial intelligence management system standard Compliance · 9 min -
AI cybersecurity: what the AI Act requires (Article 15) Compliance · 13 min -
Supplier security questionnaire: template and key questions Risk analysis · 13 min -
Hospital cyberattack: 5 lessons from the €500,000 CNIL fine Cyber news · 8 min -
GRC tools: comparison and criteria to choose the right one GRC · 12 min - Third-party risk management (TPRM): assessing your suppliers Risk analysis · 10 min
-
SBOM: the software bill of materials required by the CRA Compliance · 11 min - CRA: reporting exploited vulnerabilities from September 2026 Compliance · 12 min
-
Business continuity plan (BCP): method, template and example Compliance · 10 min -
Cyber Resilience Act (CRA): what changes for digital products Compliance · 16 min - DPIA: carrying out a data protection impact assessment Compliance · 11 min
-
AI and GRC: what automation changes, and its limits GRC · 12 min -
GRC Engineering: what the trend means for CISOs GRC · 11 min - GRC Ops: operational, continuous GRC GRC · 16 min
-
High-risk AI systems: does the AI Act apply to you? Compliance · 12 min - HDS: understanding France's health data hosting certification Compliance · 10 min
-
EU AI Act: what the AI regulation changes for you Compliance · 17 min -
LPM and cybersecurity: OIV, OSE and the obligations of France's military programming law NIS 2 · 11 min -
RGS (French general security framework): what it requires Compliance · 10 min -
SecNumCloud: ANSSI's framework for trusted cloud Compliance · 9 min -
Security dashboard: the cybersecurity KPIs worth tracking GRC · 10 min -
Cybersecurity audit: process, types, cost and deliverables Compliance · 11 min - ISMS: understanding the information security management system GRC · 11 min
-
Risk manager: responsibilities, salary, training and tools Risk analysis · 9 min - Information security policy: how to write one GRC · 12 min
-
Regulatory watch: definition, method and sources for cybersecurity Compliance · 9 min - SOC 2 explained for European companies Compliance · 10 min
- What is GRC? Governance, risk and compliance GRC · 12 min
- NIST CSF, ISO 27001, COBIT, CIS Controls: which cybersecurity framework should you choose? Compliance · 11 min
- DICP: the four information security criteria Risk analysis · 7 min
- Information system mapping: building it step by step Risk analysis · 11 min
- ISO 27005: the information security risk management standard explained Risk analysis · 11 min
-
Residual risk and inherent risk: definitions, difference and calculation Risk analysis · 9 min -
Risk mapping: building it step by step Risk analysis · 11 min - Risk matrix: definition, example and Excel template Risk analysis · 11 min
-
NIS 2 penalties NIS 2 · 5 min -
NIS 2 Directive: which sectors are concerned? NIS 2 · 7 min -
From NIS to NIS 2 NIS 2 · 10 min -
What is a risk analysis? Risk analysis · 10 min
No article matches this search.
See all resultsresults
Featured
Featured Risk analysis
Data security: protecting your organisation's data in 6 steps
Data security: what it means, what GDPR and NIS 2 require, and a six-step method to classify, protect and back up your organisation's data.
Cyber Resilience Act
Digital products, vulnerability reporting, SBOM.
AI Act
Obligations, high-risk systems, deployers.
AI Act: obligations for organisations that use AI
ISO 42001: the artificial intelligence management system standard
AI cybersecurity: what the AI Act requires (Article 15)
High-risk AI systems: does the AI Act apply to you?
EU AI Act: what the AI regulation changes for you
Third-party risk
Assess, govern and monitor your suppliers.
Supermarket cyberattack: what the refrigeration hack reveals
Digital sovereignty: what a sovereign cloud really changes
TISAX: the automotive security label, assessment levels and process
Shadow IT: definition, risks and how to bring it under control
Third-party risk: what NIS 2 and DORA require
Supply chain attacks: definition, examples and how to protect yourself
Security assurance plan: securing your service providers by contract
Supplier security questionnaire: template and key questions
Third-party risk management (TPRM): assessing your suppliers
SBOM: the software bill of materials required by the CRA
SOC 2 explained for European companies
NIS 2
The directive, its sectors, its penalties and its transposition.
Data security: protecting your organisation's data in 6 steps
Cyber resilience: why protection is no longer enough
Vulnerability management: the full cycle and how to prioritise
Cybersecurity roadmap: building a three-year plan
Security awareness training: building and measuring a programme
Zero trust: principles, architecture and a step-by-step roll-out
Regulatory compliance: definition and how to become compliant
NIST CSF 2.0: the six functions, profiles and tiers
Third-party risk: what NIS 2 and DORA require
ISO 27035: managing information security incidents
Cybersecurity compliance management: method, roles and indicators
Resilience bill: where does the NIS 2 transposition stand in France?
Continuous compliance: from the annual audit to permanent control
LPM and cybersecurity: OIV, OSE and the obligations of France's military programming law
Regulatory watch: definition, method and sources for cybersecurity
NIST CSF, ISO 27001, COBIT, CIS Controls: which cybersecurity framework should you choose?
NIS 2 penalties
NIS 2 Directive: which sectors are concerned?
From NIS to NIS 2
Governance and GRC
CISO, security policy, ISMS, GRC Ops.
Cybersecurity roadmap: building a three-year plan
IT security plan: contents, steps and tools
Security awareness training: building and measuring a programme
CISO and DPO: roles, differences and how they work together
Digital sovereignty: what a sovereign cloud really changes
Zero trust: principles, architecture and a step-by-step roll-out
Human firewall: turning employees into a line of defence
Risk management: the approach, the roles and the IT case
Regulatory compliance: definition and how to become compliant
NIST CSF 2.0: the six functions, profiles and tiers
IT acceptable use policy: contents, legal value and how it differs from a security policy
Cybersecurity compliance management: method, roles and indicators
CISO: role, responsibilities and tools
GRC tools: comparison and criteria to choose the right one
AI and GRC: what automation changes, and its limits
GRC Engineering: what the trend means for CISOs
GRC Ops: operational, continuous GRC
LPM and cybersecurity: OIV, OSE and the obligations of France's military programming law
RGS (French general security framework): what it requires
Security dashboard: the cybersecurity KPIs worth tracking
Cybersecurity audit: process, types, cost and deliverables
ISMS: understanding the information security management system
Risk manager: responsibilities, salary, training and tools
Information security policy: how to write one
Regulatory watch: definition, method and sources for cybersecurity
What is GRC? Governance, risk and compliance
NIST CSF, ISO 27001, COBIT, CIS Controls: which cybersecurity framework should you choose?
Information system mapping: building it step by step
Risk methods
Risk analysis, matrix, mapping, CIAP, ISO 27005.
Data security: protecting your organisation's data in 6 steps
Vulnerability management: the full cycle and how to prioritise
ISO 31000: principles, framework and process of risk management
Risk management: the approach, the roles and the IT case
Business process mapping: method, example and use in a BIA
GRC tools: comparison and criteria to choose the right one
Risk manager: responsibilities, salary, training and tools
DICP: the four information security criteria
Information system mapping: building it step by step
ISO 27005: the information security risk management standard explained
Residual risk and inherent risk: definitions, difference and calculation
Risk mapping: building it step by step
Risk matrix: definition, example and Excel template
What is a risk analysis?
Explore by topic
All publications
- 27 Oct 2026 Data security: protecting your organisation's data in 6 steps 12 min
- 23 Oct 2026 Cyber resilience: why protection is no longer enough 11 min
- 20 Oct 2026 Vulnerability management: the full cycle and how to prioritise 11 min
- 16 Oct 2026 Supermarket cyberattack: what the refrigeration hack reveals 7 min
- 16 Oct 2026 Cybersecurity roadmap: building a three-year plan 12 min
- 15 Oct 2026 Ransomware: understanding, preventing and responding to an attack 12 min
- 15 Oct 2026 IT security plan: contents, steps and tools 11 min
- 14 Oct 2026 ISO 31000: principles, framework and process of risk management 10 min
- 14 Oct 2026 Security awareness training: building and measuring a programme 11 min
- 14 Oct 2026 ISO 27701: the privacy information management standard 10 min
- 14 Oct 2026 CISO and DPO: roles, differences and how they work together 11 min
- 13 Oct 2026 Digital sovereignty: what a sovereign cloud really changes 9 min
- 13 Oct 2026 Zero trust: principles, architecture and a step-by-step roll-out 12 min
- 13 Oct 2026 TISAX: the automotive security label, assessment levels and process 10 min
- 13 Oct 2026 Human firewall: turning employees into a line of defence 10 min
- 12 Oct 2026 Risk management: the approach, the roles and the IT case 12 min
- 12 Oct 2026 Regulatory compliance: definition and how to become compliant 11 min
- 12 Oct 2026 NIST CSF 2.0: the six functions, profiles and tiers 12 min
- 11 Oct 2026 Business process mapping: method, example and use in a BIA 10 min
- 11 Oct 2026 Shadow IT: definition, risks and how to bring it under control 11 min
- 10 Oct 2026 Pentest: penetration testing explained, from black box to TLPT 11 min
- 10 Oct 2026 IT acceptable use policy: contents, legal value and how it differs from a security policy 11 min
- 9 Oct 2026 Third-party risk: what NIS 2 and DORA require 13 min
- 9 Oct 2026 ISO 27035: managing information security incidents 10 min
- 8 Oct 2026 Cybersecurity compliance management: method, roles and indicators 12 min
- 8 Oct 2026 Resilience bill: where does the NIS 2 transposition stand in France? 6 min
- 8 Oct 2026 Data breaches in the French State: what Operation REACTIV reveals 8 min
- 7 Oct 2026 Continuous compliance: from the annual audit to permanent control 13 min
- 7 Oct 2026 Ransomware: why VPNs and firewalls are the main way in 7 min
- 6 Oct 2026 CRA: important and critical products, which conformity assessment? 13 min
- 6 Oct 2026 CISO: role, responsibilities and tools 12 min
- 6 Oct 2026 Supply chain attacks: definition, examples and how to protect yourself 12 min
- 5 Oct 2026 AI Act: obligations for organisations that use AI 15 min
- 5 Oct 2026 Security assurance plan: securing your service providers by contract 11 min
- 2 Oct 2026 Shadow AI: when AI agents become a cyber risk 8 min
- 2 Oct 2026 ISO 42001: the artificial intelligence management system standard 9 min
- 1 Oct 2026 AI cybersecurity: what the AI Act requires (Article 15) 13 min
- 1 Oct 2026 Supplier security questionnaire: template and key questions 13 min
- 30 Sept 2026 Hospital cyberattack: 5 lessons from the €500,000 CNIL fine 8 min
- 30 Sept 2026 GRC tools: comparison and criteria to choose the right one 12 min
- 29 Sept 2026 Third-party risk management (TPRM): assessing your suppliers 10 min
- 28 Sept 2026 SBOM: the software bill of materials required by the CRA 11 min
- 25 Sept 2026 CRA: reporting exploited vulnerabilities from September 2026 12 min
- 24 Sept 2026 Business continuity plan (BCP): method, template and example 10 min
- 23 Sept 2026 Cyber Resilience Act (CRA): what changes for digital products 16 min
- 22 Sept 2026 DPIA: carrying out a data protection impact assessment 11 min
- 21 Sept 2026 AI and GRC: what automation changes, and its limits 12 min
- 18 Sept 2026 GRC Engineering: what the trend means for CISOs 11 min
- 17 Sept 2026 GRC Ops: operational, continuous GRC 16 min
- 16 Sept 2026 High-risk AI systems: does the AI Act apply to you? 12 min
- 15 Sept 2026 HDS: understanding France's health data hosting certification 10 min
- 14 Sept 2026 EU AI Act: what the AI regulation changes for you 17 min
- 10 Sept 2026 LPM and cybersecurity: OIV, OSE and the obligations of France's military programming law 11 min
- 9 Sept 2026 RGS (French general security framework): what it requires 10 min
- 8 Sept 2026 SecNumCloud: ANSSI's framework for trusted cloud 9 min
- 7 Sept 2026 Security dashboard: the cybersecurity KPIs worth tracking 10 min
- 3 Sept 2026 Cybersecurity audit: process, types, cost and deliverables 11 min
- 1 Sept 2026 ISMS: understanding the information security management system 11 min
- 27 Aug 2026 Risk manager: responsibilities, salary, training and tools 9 min
- 25 Aug 2026 Information security policy: how to write one 12 min
- 24 Aug 2026 Regulatory watch: definition, method and sources for cybersecurity 9 min
- 20 Aug 2026 SOC 2 explained for European companies 10 min
- 18 Aug 2026 What is GRC? Governance, risk and compliance 12 min
- 13 Aug 2026 NIST CSF, ISO 27001, COBIT, CIS Controls: which cybersecurity framework should you choose? 11 min
- 11 Aug 2026 DICP: the four information security criteria 7 min
- 6 Aug 2026 Information system mapping: building it step by step 11 min
- 4 Aug 2026 ISO 27005: the information security risk management standard explained 11 min
- 30 Jul 2026 Residual risk and inherent risk: definitions, difference and calculation 9 min
- 28 Jul 2026 Risk mapping: building it step by step 11 min
- 21 Jul 2026 Risk matrix: definition, example and Excel template 11 min
- 17 Sept 2024 NIS 2 penalties 5 min
- 18 Jul 2024 NIS 2 Directive: which sectors are concerned? 7 min
- 17 Aug 2023 From NIS to NIS 2 10 min
- 12 Jun 2023 What is a risk analysis? 10 min
No article matches.
A platform and service that adapt to you
Our platform is designed for fine-tuned configuration and broad adaptability to your needs.