{"id":3233,"date":"2025-05-09T12:10:35","date_gmt":"2025-05-09T12:10:35","guid":{"rendered":"https:\/\/www.intrinsec.com\/?page_id=3233"},"modified":"2025-10-02T12:23:47","modified_gmt":"2025-10-02T12:23:47","slug":"pme-eti","status":"publish","type":"page","link":"https:\/\/www.intrinsec.com\/en\/pme-eti\/","title":{"rendered":"SMEs & Mid-Sized Companies"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

\n SMEs & Mid-Sized Companies<\/span> <\/h1>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Structuring your cybersecurity sustainably and industrializing your practices without complexity<\/span><\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t<\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\tGet in touch<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Our SME & Mid-Sized Company program assesses your information system and IT environments to define an appropriate level of security. We conduct a risk analysis to prioritize security measures and reduce overall IT risk. The approach includes regular IT security audits to identify vulnerabilities on servers, workstations, and applications. Securing information systems involves centralized authentication controls, password management, and MFA (Multi-Factor Authentication). We help the CIO formalize an operational IT security policy that is easily understood by the executive committee. Our recommendations cover system security, network security, and the protection of sensitive and confidential data. The plan includes encryption and cryptography measures to protect communications and data at rest. The security of connected systems (IoT, cloud, SaaS) is mapped to avoid operational weaknesses. We implement security solutions (EDR\/antivirus, SIEM, IAM) and playbooks for security incidents. The framework includes the integration of ANSSI-compliant controls and consideration of CNIL requirements for data processing. Our audits and architecture reviews aim to reduce structural vulnerabilities and improve resilience against cyberattacks. We implement pragmatic information security governance to industrialize risk management and cross-functional oversight. The proposed managed or hybrid SOC ensures continuous detection and reduces response time to security incidents. Actions include server hardening, network segmentation, encrypted backups, and secrets management. We identify IT risks related to dependencies and infrastructure to prioritize remediation. Our experts advise on security policy, system security, and the protection of critical assets. Training and awareness programs for teams help reduce incidents caused by malicious behavior or human error. Deliverables include an IT infrastructure map, a risk matrix, and a prioritized action plan to secure systems. Our technical recommendations include encryption, cryptography, strong authentication, and application hardening. We support ISO 27001 \/ NIS2 compliance and prepare for client and regulatory audits. Our goal: to make your IT systems secure, resilient, and aligned with your business strategy and regulatory requirements. Request an IT security audit or an architecture workshop to develop an operational security roadmap.<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Concrete challenges at this stage of growth<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

You are in a phase of structuring, industrialization, or expansion. Your information system has become critical, connected, and sometimes distributed. Your customers, partners, and regulators expect a clear security posture. It's time to lay solid, operational foundations while maintaining an efficient and appropriately scaled approach.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/i>\n <\/div>\n \n

Structuring security governance<\/h3><\/div>\n <\/div>\n\n
\n \n
\n

Clarify roles, responsibilities, and documentation.<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

Strengthen compliance<\/h3><\/div>\n <\/div>\n\n
\n \n
\n

GDPR, ISO 27001, CyberScore, sector requirements.<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

Industrializing risk management<\/h3><\/div>\n <\/div>\n\n
\n \n
\n

To have a formalized, prioritized, and shareable monitoring system.<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

Having an outsourced or hybrid SOC<\/h3><\/div>\n <\/div>\n\n
\n \n
\n

Detect quickly, without overloading the teams.<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

Integrating security into IT & Cloud projects<\/h3><\/div>\n <\/div>\n\n
\n \n
\n

To provide security expertise to project teams.<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

Raising awareness among the teams<\/h3><\/div>\n <\/div>\n\n
\n \n
\n

Maintain a continuous safety culture throughout the company.<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

Improving incident response<\/h3><\/div>\n <\/div>\n\n
\n \n
\n

To be prepared, structured, without relying solely on intuition.<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

\n What this <\/span>\n\t\t\t\t\t\t\t\t\t<\/span>\n \n course<\/span><\/svg><\/span><\/span> <\/span><\/span>allows you to pilot<\/span> <\/h2>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n
\n \n
\n
\n
\n
\n\n
\n

\"\"<\/h3>

Strategy & Governance<\/strong><\/span><\/h3>

Proposed actions<\/strong><\/p>

Mapping of IT security roles, Strategic Plan, Information Systems Security Policy, Cybersecurity Committee<\/p>

Business value<\/strong><\/p>

Safety\/management alignment; clear framework for ESG or audits<\/p> <\/div>\n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n \n

\n
\n
\n
\n\n
\n

\"\"<\/h3>

Risks & Compliance<\/strong><\/span><\/h3>

Proposed actions<\/strong><\/p>

GDPR audit\/projects, ISO 27001 or CyberScore action plan<\/p>

Business value<\/strong><\/p>

Preparation for compliance; improved customer\/partner relationships<\/p> <\/div>\n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n \n

\n
\n
\n
\n\n
\n

\"\"<\/h3>

Architecture & SecOps<\/strong><\/span><\/h3>

Proposed actions<\/strong><\/p>

Cloud access review, AD\/AAD hardening, Zero Trust policy<\/p>

Business value<\/strong><\/p>

Mastery of hybrid architectures, secure cloud posture<\/p> <\/div>\n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n \n

\n
\n
\n
\n\n
\n

\"\"<\/strong><\/span><\/h3>

Cyber Defense Operations<\/strong><\/span><\/h3>

Proposed actions<\/strong><\/p>

Managed SOC tailored for next-generation EDR\/antivirus<\/p>

Business value<\/strong><\/p>

24\/7 monitoring, detection capability and controlled scalability<\/p> <\/div>\n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n \n

\n
\n
\n
\n\n
\n

\"\"<\/h3>

Incident & Crisis<\/strong><\/span><\/h3>

Proposed actions<\/strong><\/p>

Scenario mapping, exercises, response kit<\/p>

Business value<\/strong><\/p>

Structuring a real, orchestrated, and actionable response plan<\/p> <\/div>\n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n \n

\n
\n
\n
\n\n
\n

\"\"<\/strong><\/span><\/h3>

Resilience<\/strong><\/span><\/h3>

Proposed actions<\/strong><\/p>

Formalized PCA\/PRA, mapping of critical dependencies<\/p>

Business value<\/strong><\/p>

Improved business continuity and customer assurance<\/p> <\/div>\n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n \n

\n
\n
\n
\n\n
\n

\"\"<\/h3>

Cyber culture<\/strong><\/span><\/h3>

Proposed actions<\/strong><\/p>

Annual awareness cycle, targeted job kits<\/p>

Business value<\/strong><\/p>

Security dynamics embedded in internal practices<\/p> <\/div>\n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n

\n <\/path><\/svg> <\/div>\n
\n <\/path><\/svg> <\/div>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

This route is designed for:<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

<\/h4><\/div>\n <\/div>\n\n
\n \n
\n

SMEs with more than 50 employees, in growth or in the process of digitalization<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

<\/h4><\/div>\n <\/div>\n\n
\n \n
\n

SMEs organized by business unit\/service area, with Cloud, SaaS or sensitive tools<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

<\/h4><\/div>\n <\/div>\n\n
\n \n
\n

Structures with key requirements in reporting SSI<\/strong>, steering committees or ESG<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

<\/h4><\/div>\n <\/div>\n\n
\n \n
\n

Organizations in joint ventures, subcontracting<\/strong> Or multi-site<\/strong> (Hybrid cloud, subsidiaries)<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Target maturity level\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t\t
\n\n\t\t\t\t\"\"\t\t\t\t\t\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\n\t\t\t<\/div>\n\n\t\t\t\n\t\t\t\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t