Accounts, payroll, client files, health data, bank details: your organisation holds data that the law and your partners ask you to protect. A breakdown, a stolen laptop, a booby-trapped e-mail or a bad-tempered departure is enough to lose it or expose it. We assess your risks, put in place protections in proportion to your organisation and prepare your compliance with the law on the protection of personal data.
Four essential protections
Encryption
Workstations, media, backups and exchanges: the data is unreadable to anyone not authorised.
Backups
Automatic, tested and kept off site: a breakdown or a theft no longer costs years of data.
Secure communications
Protected messaging, encrypted file sharing and exchange areas reserved for your clients and partners.
Compliance
Formalities with the data protection authority (Commission de l’informatique et des libertés, CIL), information given to individuals, security measures: the law is complied with and you can show it.
What we do
- Security audit of data and management information systems.
- Security policy, data classification and rules for the use of tools.
- Encryption of workstations, media and exchanges; password management and two-factor authentication.
- Automatic backups, recovery plan and business continuity plan.
- Secure messaging and document sharing with your clients, partners and donors.
- Compliance with the law on the protection of personal data: formalities with the CIL, information given to individuals, contracts with processors.
- Staff awareness: phishing, passwords, use of personal devices.
Our approach
Assess
Which data, where, in whose hands, with what risks: the review comes before any spending.
Protect
Measures are rolled out in order of priority, starting with backups and access.
Test
A backup is only worth something if the restore works: every protection is checked.
Raise awareness
Most incidents start with a human action: your teams are trained, then put to the test.
What you receive
- Security audit report and prioritised action plan.
- Security policy and procedures.
- Backups and recovery plan, tested.
- Compliance file for the personal data law.