Method
We start with a focused scoping exchange, validate objectives, execute with traceable controls, then deliver practical recommendations your teams can act on.
Back home
Service expertise
ISO 27005, EBIOS and Risk Management
We structure cyber risk analysis using recognized methods so teams can prioritize controls according to real business exposure.
Specific work
- Asset and feared-event workshops
- ISO 27005 and EBIOS RM analysis
- Risk scoring and ownership
- Risk register governance
Deliverables
- Risk register
- Risk scenarios and scoring model
- Treatment roadmap
- Management-ready synthesis
FAQ
How does AFRISCON start the engagement?
With a short scoping session to confirm context, objectives, constraints, stakeholders and expected outputs.
Can the scope be adapted?
Yes. The scope is adjusted to your environment, maturity, priorities and available evidence.
What happens after the deliverables?
AFRISCON can support remediation planning, implementation follow-up, training or a targeted reassessment.