Context and scope
Risk analysis and treatment for an SME-type organisation: diagnosis, risk mapping, action plan and security policy.
Work performed
- Review organisation, assets, access and working practices.
- Identify threats, weaknesses, impacts, likelihood and criticality.
- Prioritise and sequence IAM, segmentation, encryption, logging, backup and awareness.
- Connect the treatment plan, before/after mapping, residual risk and continuity.
Documented deliverables and outcomes
Assessment report; before/after treatment risk map; action plan; security-policy and continuity recommendations.
Scope of outcomes
The reviewed public documents describe the work and deliverables above. They do not provide a quantified before/after series supporting a risk-reduction percentage here.
Methods and tools
ISO 27001 / 27002 · RGPD / GDPR · Risk Mapping · Treatment Plan · PSSI / ISSP
Public scope
Client data, exploitable configurations and proprietary mechanisms remain excluded from this presentation.
Last reviewed: 26 October 2026
Discuss this work