Our services
From the initial audit to continuous monitoring, we cover the whole security life cycle of your information system. Each service can be ordered on its own or as part of a multi-year programme.
Audit and compliance
Measure your actual security level and your compliance with applicable standards and laws.
We assess your organisation, processes and infrastructure against recognised frameworks (ISO/IEC 27001, NIST CSF) and Congolese law. You get a clear risk map and a costed roadmap.
What the service includes
- Organisational and governance audit
- Technical audit: network, servers, endpoints, applications
- Internal and external penetration tests
- Regulatory compliance analysis
- Executive summary and prioritised remediation plan
Staff training
Tailored learning paths, from everyday users to security managers.
Our courses draw on real cases observed in the DR Congo. They are delivered on site or remotely, in French or English, and confirmed by an attendance certificate.
What the service includes
- Digital hygiene for all staff
- CISO, security technician and security auditor tracks
- Executive training: governance and crisis management
- Hands-on exercises and simulations
- Individual attendance certificates
SOC deployment
A security operations centre to detect and counter attacks around the clock.
We design, deploy and run your SOC, on your premises or as a shared service. We then train your analysts so they can gradually take over operations.
What the service includes
- Scoping and sizing study
- Selection and integration of collection and correlation tools (SIEM)
- Detection use cases and response procedures
- 24/7 or business-hours operations
- Dashboards and monthly reports
Disaster recovery plans
Restart fast, without major loss, after an incident or a disaster.
We build your business continuity plan (BCP) and disaster recovery plan (DRP) with you: which services to restart first, how fast, with which backups. Then we put it to the test.
What the service includes
- Business impact analysis (BIA)
- Recovery objectives (RTO and RPO)
- Backup and restore strategy
- Writing the BCP and DRP
- Crisis exercises and restore tests
Incident response
Emergency intervention when the attack has already happened.
Ransomware, intrusion, data leak, hijacked account: our experts mobilise as quickly as possible to contain the attack, establish its origin and restore your services.
What the service includes
- Diagnosis and containment
- Digital forensics
- Eradication and recovery
- Support for filing a complaint
- Incident report and recommendations
Legislative support
Technical support for institutions building the legal framework for the digital economy.
Drawing on our work with the National Assembly and the Ministry of Justice, we bring technical expertise to drafting texts on cybersecurity, cybercrime and data protection.
What the service includes
- Comparative analysis of legislation
- Technical drafting and review of texts
- Support for specialised cybercrime units
- Facilitation of institutional workshops
How we start an engagement
Scoping meeting
We listen to your context, constraints and priorities.
Proposal
You receive a detailed technical and financial proposal.
Confidentiality agreement
We sign a non-disclosure agreement before any access to your systems.
Delivery and debrief
We carry out the engagement, then present the results to your teams and management.