Failing to plan ahead already exposes your business.
Many organisations believe their size or low profile protects them. In a study relayed in 2026, 92% of SMEs say they have invested in cybersecurity, yet 26% suffered an attack in 2025.
The issue also reaches you through your customers. In a survey of February 2026, 66% of SMEs consider it crucial to be able to prove secure data management in order to win contracts.
So the challenge is not only to avoid an attack. It is to react quickly, limit the impact and keep producing, then show proof of it to your customers and prime contractors.
Make cybersecurity simple to decide on and to follow: an assessment to know where you stand, then support for the path you choose, on Microsoft 365 as well as in industrial environments.
Start with the assessment, then choose the level of support that fits your teams and your timetable. We tell you what will be expected of you before any commitment.
Know where you stand, within a few weeks.
We guide you, you deliver using our templates.
We write, deploy and manage. You approve.
| Assessment | Guided | Turnkey and operations | |
|---|---|---|---|
| Maturity audit and roadmap | ✔ | ✔ | ✔ |
| Quick actions (MFA, backups) | ✔ | ✔ | ✔ |
| Compliance file | — | Written with you | Written by us |
| Technical measures (Microsoft 365, backups) | Recommended | Priority measures | Full deployment |
| Training and awareness | — | ✔ | ✔ |
| Mock audit | — | ✔ | ✔ |
| Part-time CISO, monitoring, incident response | — | Optional | ✔ |
The European NIS 2 directive targets many medium-sized and mid-sized companies in the sectors concerned, as well as their subcontractors. In France, the transposition law is still under examination and its timetable remains uncertain. The requirements themselves are known, and your customers and prime contractors are already anticipating them. ISO 27001 certification is the strongest proof to show your customers. The IEC 62443 standard covers the security of industrial systems. We remain independent of certification bodies: you choose yours, and we help you compare quotes.
NIS 2 exposure assessment (are you in scope, and at what level?), maturity audit against your target, and a roadmap prioritised by risk and effort.
The file that the auditor or your customers and prime contractors will ask for, the security measures and the upskilling of your teams.
Mock audit under real conditions, then internal audits, an annual management review, monitoring of indicators and regulatory watch, with a part-time CISO included in our outsourced IT department package.
We advise and we operate: the measures are put in place on your tools, not left for you to handle. Microsoft 365 expertise, knowledge of industrial environments (IT and OT) and support for ISO 27001, NIS 2 and IEC 62443, fully independent of certification bodies, with a single point of contact from audit to crisis management. We are currently running ISO 27001 certification projects with several clients.
With the Assessment. In 3 to 4 weeks, depending on scope, you get a clear view of your risks, a prioritised roadmap and quick actions, such as rolling out multi-factor authentication across the board. You then decide whether or not to continue.
It depends on your sector and your size, or those of your customers if you are a subcontractor. We check this with you from the assessment stage, based on the texts in force at the time of the analysis.
You can wait for the law, but your customers will not. Many customers and prime contractors already ask for guarantees, and the basic measures (multi-factor authentication, tested backups, access management) are useful whatever the date of application. The assessment tells you which ones to prioritise.
Not necessarily. NIS 2 does not issue a certificate. ISO 27001 is the strongest proof for your customers. The assessment helps you choose the most relevant target.
With Guided, you write and apply using our templates and workshops: your teams become more autonomous. With Turnkey, we write, deploy and manage, and you approve: it is the option that asks the least of your teams.
The assessment is at a fixed price, agreed before any commitment. The other two offers are priced by quote, after the assessment.
A few interviews for the Assessment, regular workshops for Guided, and only approvals for Turnkey. We tell you what will be expected of you before any commitment.
With all accredited bodies, with no exclusivity: a certifier cannot audit a system it helped design, and this independence guarantees the objectivity of your certification. We help you compare offers and we prepare your team for the audit.
It is the international cybersecurity standard for industrial automation and control systems: PLCs, supervision, shop-floor networks. It applies to any connected production site and is increasingly required by customers, prime contractors and insurers. We apply it through zoning of the industrial network, the definition of target security levels and measures adapted to production constraints. It is offered as an option in offers 2 and 3.
Cyber100 is completed online in about two hours, over several sessions, with quizzes and a certificate. We complement it with phishing simulations to measure progress.