Kerialis: RSSI as a service & DORA Gap analysis

Home > Cas Clients > Kerialis: RSSI as a service & DORA Gap analysis

Netsystem carried out a DORA gap analysis and a CISO as a service service to implement the roadmap.

Context and objectives

KERIALIS is a social protection institution dedicated to the legal and accountancy professions, in particular lawyers and chartered accountants. For over 60 years, it has offered supplementary health, provident, long-term care, end-of-career and retirement benefits, as well as a range of services to support its policyholders on a day-to-day basis.

To guarantee its security, the organisation needed to take stock of its situation, particularly in relation to the DORA regulation, which applies to the EU’s financial sector and to ICT service providers in this sector.

Business challenge

Measure deviations from DORA regulations
Support KERIALIS in its DORA compliance programme
Implement a Roadmap
Make DORA compliance a real competitive advantage and a guarantee of stability for KERIALIS
And above all guarantee the resilience of the information system

Response and method

Netsystem’s cybersecurity experts carry out for Kerialis :

Gap analysis DORA
Raising management awareness (in collaboration with Marc-Antoine Ledieu, a lawyer specialising in contract engineering and digital law)
Contract review
CISO as a Service (Netsystem acts as an outsourced CISO for Kerialis)
Raising employee awareness of cyber risks

Key success factors

Gap Analysis completed within a short timeframe (5 weeks)
Strong commitment from Kerialis teams, who have a good understanding of cyber risks
The expertise of Netsystem consultants in cybersecurity and, more generally, in digital confidence (IT and legal)
An understanding of the 5 pillars of DORA
Experience in other regulations, reference systems and standards (27001, 22301, etc.)
Experience of managing major projects in a sensitive context
PASSI qualification validated by ANSSI

Marie LEAO, Key compliance function and Head of Permanent Control

KERIALIS

KERIALIS was looking for a service provider to help us comply with the requirements of the DORA regulation. We chose Netsystem because of the speed with which they got in touch with us, the quality of their discussions and the speed of their response. NETSYSTEM is an agile organisation with a strong capacity to adapt and experienced CISOs, particularly in the cybersecurity aspects of DORA.