Question 1

Do you work with SMEs or only large enterprises?

Accepted Answer

Both. My experience spans organisations from 10 to 23,000 users. The approach adapts to your size, resources and industry.

Question 2

What are your qualifications?

Accepted Answer

ISO 27001 Lead Implementer and ISO 22301 Lead Auditor, with over 10 years of hands-on experience at Saint-Gobain, BNP Paribas and CA COM.

Question 3

Do you work remotely or on-site?

Accepted Answer

Both. Kick-off and restitution meetings can be held remotely. Some technical missions require on-site presence.

Question 4

What is your usual response time?

Accepted Answer

Under 24h on business days for an initial contact. In case of emergency (active incident), a dedicated line is shared with contracted clients.

Question 5

What is the difference between an audit and a pentest?

Accepted Answer

An audit assesses your organisation, processes and configurations against a framework (ISO 27001, ANSSI…). A pentest is a technical attack simulation to find exploitable vulnerabilities. Both are complementary.

Question 6

How long does an audit or pentest typically take?

Accepted Answer

From 2 days for a targeted audit to 3 weeks for a complex scope. The initial scoping call determines the exact duration for your context.

Question 7

Do you offer training for non-technical staff?

Accepted Answer

Yes. Awareness sessions (phishing, passwords, security reflexes) adapted to all levels are available, in-person or remotely.

Question 8

Can you respond to a security incident?

Accepted Answer

Yes. In case of compromise, ransomware or data breach, I intervene urgently to qualify the incident, contain the damage and support recovery.

Question 9

Can you help us achieve ISO 27001 certification?

Accepted Answer

Yes. I support you end-to-end: gap analysis, ISMS implementation, policy drafting, team training and preparation for the certification audit.

Question 10

Can you help with NIS2 compliance?

Accepted Answer

Yes. I analyse your situation against NIS2 obligations, identify required measures and support implementation before legal deadlines.

Question 11

What does GDPR support cover?

Accepted Answer

Processing activity mapping, GDPR register drafting, risk analysis, legal notice updates, DPO training and CNIL audit preparation.

Question 12

How does a first engagement work?

Accepted Answer

1) Discovery call (30 min, free). 2) Proposal and quote within 48h. 3) Kick-off meeting. 4) Execution with regular progress updates. 5) Restitution and delivery of outputs.

Question 13

Do you sign an NDA?

Accepted Answer

Yes, systematically before any access to your systems or sensitive documents.

Question 14

How is my company's data protected during the engagement?

Accepted Answer

Encrypted communications and files, encrypted storage, secure data destruction after the mission, contractual confidentiality commitment.

Frequently Asked Questions

🏢 General

🛡️ Services

📋 Compliance

💼 Working Process

Have a specific question?