Almond is positioned as one of the major players in cybersecurity in France, supporting its customers in a cross-functional way on organizational (compliance, governance) and operational (audit and penetration tests, security infrastructure, SOC – CERT) aspects:
Our labels, certifications and authorizations
Almond is:
-
PASSI qualified for penetration tests, technical audits (architecture, configuration, application source code), and organizational and physical security audits,
-
Associate member of the Cyber Campus, which aims to promote French excellence in cybersecurity, by bringing together talents and actors of the sector in a common place, around innovation projects,
-
CESIN’s sponsor since its creation. CESIN is a forum for exchange, experience sharing and cooperation dedicated to information and digital security experts,
-
2022 member of CLUSIF, the reference association for digital security in France, bringing together all economic sectors around cybersecurity,
-
holder of the France Cybersecurity Label “, for its audit and consulting offers, its SOC CERT CWATCH, as well as its BYCE and Security Rating solutions,
-
PCI QSA Company, qualified to conduct PCI DSS certification audits since 2010,
-
Authorized as an auditor by the ANJ (National Gaming Authority) to conduct certification audits with online Gaming operators,
-
listed in SWIFT’s directory of assessment service providers* related to the Customer Security Programme and can assist its clients in independent assessments under the CSP (Customer Security Programme) and CSCF (Customer Security Controls Framework),
* SWIFT does not certify, guarantee, endorse or recommend any of the listed vendors; it is the responsibility of the SWIFT user to determine whether the vendor meets all the necessary criteria to adequately assist the user in complying with the Customer Security Programme (CSP) controls.
-
holder of the ” Pass Cyber Conseil ” at the initiative of the Hauts-de-France Regional Council, for its offersintended for SMEs located in Hauts-de-France.
Our Governance, Risks & Compliance expertise
Cybersecurity Assessment: the first cyberrisk analysis of your information system
Flash Maturity Assessment: Identify your overall security level and improve your practices
Information security: pass your ISO 27001 certification, maintain it and improve your ISMS
Operator of Essential Services: Achieving Compliance
GDPR compliance and DPO assistance: be prepared for the unexpected
GDPR assessment: evaluate your level of compliance
Security for extended organizations: assessing and improving your information security beyond the boundaries of your systems
PCI DSS: achieving compliance, achieving certification and maintaining it
SWIFT CSP: achieving compliance
Crisis exercise: facing the challenges of the consequences of a successful cyber attack, improving cyber resilience
Major incident and cyber crisis management: be prepared for the unexpected
Office 365: Teams and Security: leveraging the capabilities of the Office 365 digital hub without compromising on security
Resilience and the health crisis: capitalizing on the lessons of the health crisis and the opportunities to increase resilience
Industrial systems security: audit your industrial information system according to industry best practices
Industrial information systems security audits: security risks analysis related to your industrial information system
Our SOC / CERT / CWATCH expertise
CWATCH Mail Report
Respond & Recover: security incident response
Phishing campaign
CWATCH on Azure Sentinel: simple, comprehensive and accessible managed cybersecurity services
Our Infrastructure Security expertise
Technical audit of Microsoft 365 security
Windows desktop security: Desktop encryption with Microsoft BitLocker
Windows workstation security: managing local workstation administration accounts with Microsoft LAPS
Our latest white papers and Business Cases
White Paper: How to set up a public WiFi service in compliance with French law
Security Rating: opportunity or curse?
