ORNISEC

ORNISEC is a French cybersecurity company in western France. It works with public and private organisations in all sectors. The website names airports, air transport and health as sectors it serves. Its clients include several airports, such as Nice, Nantes and Beauvais.

Its consulting work covers governance, risk management with the EBIOS RM method, security policies and security accreditation. It also supports ISO 27001 management systems and HDS. The company offers outsourced CISO support and guidance on security projects.

Its audit work covers penetration tests, architecture audits, configuration audits, code audits, and organisational and physical audits. It also runs red team exercises. The company says it is qualified by the French agency ANSSI on the PASSI, PACS and LPM scopes. It says these are the highest levels of recognition for cybersecurity in France.

Compliance support covers NIS2, DGAC rules, Part-IS, LPM and RGPD rules. It also covers ISO 27001, ISO 22301 and HDS. Crisis management includes incident response, forensics, business continuity plans and crisis exercises.

Training and awareness programmes include phishing simulations, workshops, quizzes and e-learning. The company also trains staff by role, such as CISOs, IT directors and developers.

The company says it is certified to ISO/IEC 27001:2022 for its audit and consulting work. It received an EcoVadis Silver medal with a score of 76 out of 100. The website says the company completes around 200 projects a year, with 20 staff. It also says it joined the fifth class of the ETIncelles national programme.

Services

• Governance and risk management
• Security policies
• Security accreditation
• ISO 27001 support
• Penetration testing
• Architecture and code audits
• Red team exercises
• Outsourced CISO support
• Phishing simulations and training
• Crisis management and incident response