NIS2 Transposition Delay: Why Waiting Is Costing France Already
Thirty-eight years. That’s not a real statistic, just an image of how outdated an abandoned public IT system can feel while its […]
Category: GRC
Governance, risk and compliance cybersecurity insights — NIS2, DORA, ISO 27001 and EBIOS RM. Practical guidance, audits and regulatory frameworks to help organizations build a resilient compliance posture.
Shadow AI : Regain Control Without Blocking Everything
Shadow AI governance has become a board-level issue, yet most organisations still treat it as an employee discipline problem. In reality, unapproved […]
What If the NIS2 Directive Were Already Just a Minimum Baseline?
What if, after so much waiting, NIS2 became an outdated baseline before it was even passed into law? Not outdated through excessive […]
Cyber Crisis Management: When Prevention Is No Longer Enough
It is 3:47 AM. For five minutes, the monitoring system has been showing abnormal connections. Servers are no longer responding. Screens go […]
NIS2 in France: The Gap the ReCyF Exposes
An IT contractor leaves the company. Are their access rights revoked the same day? Their cloud permissions, removed? Their presence in SaaS […]
Insurers: Why Cyber Threats Are Reshaping Risk Management
The insurance sector is going through a period of cyber tension unlike anything it has experienced before. Attacks no longer target only […]
Cyber Crisis Management: Survive the First Five Hours
At 3:12 a.m., the alert drops: the core business servers no longer respond, access is locked, and exchanges with the SaaS provider […]
NIS2: France Opens Pre-Registration – What Executives Need to Know
France’s national cybersecurity agency, ANSSI, has just opened the NIS2 pre-registration portal. On the very same 24 November 2025, Germany announced the […]
DORA: a radiography of European technological dependence
On 18 November 2025, the European authorities EBA, ESMA and EIOPA published the first list of ICT service providers considered “critical” within […]
Harvest ransomware attack: third-party ICT risk and lessons for financial institutions
A supplier incident with systemic consequences The ransomware attack that struck Harvest SAS on 27 February 2025 revealed a structural weakness within […]