Cybersecurity

Prevention:

To prevent the occurrence of a loss, INQUEST’s teams provide tailored prevention services. They assist businesses when taking out insurance policies with a view to improving risk hedging.  

• Cyber security awareness:
  • Phishing campaigns
  • Data protection and GDPR training
  • Cyber security awareness, feedback and demonstrations

• Data protection audit and advice
  • Identifying and assessing risks 
  • GDPR compliance audit 
  • GDPR compliance assistance and monitoring, legal requirements, etc.
  • Data backup and protection policy and equipment

• Information system security audit and advice
  • Organisational audit, risk analysis
  • Assistance in the implementation or improvement of IS security governance (ISSP, BCP, DRP, Crisis management plan, etc.) 
  • IS and SSI advice: implementation and monitoring of improvement plans, technical support, architecture, Contracting Authority Assistant
  • Technical audit (internal and external penetration tests, Internet exposure rating)  
  • Assistance when taking out Cyber insurance
  • Audit of the financial impact of cyber risks

The response to a cyber attack must be immediate in order to limit its consequences. Since 2018, INQUEST’s consultants have processed more than 650 Since 2020, INQUEST’s consultants have dealt with more than 1,000 incidents on various types of cyber attacks, regardless of the business sector. 

INQUEST’s multilingual assistance unit operates 24/7 to support every one of its customers during an incident. It implements post-incident forensic investigation techniques to search for data leaks, retrieve compromised resources, restore e-reputation and envisage restoring compromised data. 

Crisis management:

nce a loss has occurred, the goal is to limit the financial impact of a total or partial loss of business.

• Incident response

INQUEST’s consultants have been trained to respond to emergencies: rapid intervention and immediate implementation of an action plan.

• • Crisis management 
  • Technical analyses (analyses of compromised items, digital (forensic) investigations, etc.) 
  • Threat analysis, monitoring and search for data leaks (Cyber Threat Intelligence) 
  • Retrieval of compromised data and recovery
  • IT remediation (deployment of monitoring mechanisms (e.g. implementation of an EDR, system reconstruction and securing)
  • Assistance with communication and regulatory procedures (notification to CNIL and those concerned, internal and external crisis communication, etc.)