Information Security

Information Security

Comprehensive protection of your sensitive data

Information Security Management

Protecting your sensitive data is crucial in today's digital environment. Our holistic approach to information security helps you protect your most valuable assets.

Governance

  • Security policy
  • Risk management
  • Regulatory compliance

Data Protection

  • Data classification
  • Encryption
  • Access control

Our Services

  • Security audit
  • Training and awareness
  • Incident management

Contact Us

Protect your sensitive information

Request an Audit

ISMS & Compliance: Our Expertise in Morocco

ISO 27001 Lead Auditor

Our CISSP and ISO 27001 LA certified consultants support your certification projects from start to finish.

Law 09-08 & GDPR

Compliance with the Moroccan personal data protection law and CNDP requirements.

Regulated Sectors

Banking, insurance, telecoms, healthcare, public sector, experience in the most demanding environments in Morocco.

Our GRC Services

ISO 27005 Risk Analysis

Identification, assessment and treatment of risks according to ISO 27005 and EBIOS Risk Manager.

Drafting the Information Security Policy

An Information Security Policy (ISP) tailored to your organization.

Business Continuity Plan (BCP/DRP)

Recovery strategies, failover testing and documentation of emergency procedures.

Employee Awareness

Tailored training programs: end users, managers, technical teams.

Frequently Asked Questions: Information Security

Generally 12 to 18 months for an initial certification, depending on the organization's starting maturity and the size of the scope involved.

Yes, any organization processing the personal data of individuals in Morocco is subject to Law 09-08 and CNDP requirements.

The ISP is the founding document of your security strategy. It is required for ISO 27001 certification and strongly recommended by the DGSSI for operators of vital importance.