The PASSI qualification is issued by the Agence Nationale de Sécurité des Systèmes d’Information (ANSSI).
It is aimed at trusted service providers who carry out organisational and physical security audits, as well as audits of technical scopes, on their own behalf or on behalf of their customers.
It is a real guarantee of quality and expertise for organisations looking for a cybersecurity consultancy to carry out an audit of their structure.
Call on a service provider officially recognised by the Agence nationale de la sécurité des systèmes d’information (French national agency for information systems security) to assess, improve the reliability and strengthen the security of your information system.
Testimonial from the Managing Director of IRTS, for whom Netsystem carried out a cyber diagnostic.
Specialising in the defence sector, IRTS develops robust electronic and display solutions (e.g. hardened computers and screens).
Strengthen your security posture with a certified audit
PASSI audits are essential for:
The duration of a PASSI audit varies according to the scope and complexity of the system being audited. On average, a full PASSI audit (organisation or architecture) takes between 5 and 15 days, including the scoping, analysis and reporting phase.
A PASSI audit is mandatory for certain sensitive players such as OIVs (Opérateurs d’Importance Vitale) or OSEs (Opérateurs de Services Essentiels). It may also be required as part of NIS2 compliance or for projects such as SecNumCloud.
At the end of a PASSI audit, you receive a full report containing:
Absolutely. The PASSI audit can complement an ISO 27001, SecNumCloud or TISAX certification process. It provides an independent, qualified assessment of your security posture.
PASSI (Prestataire d’Audit de la Sécurité des Systèmes d’Information) qualification is awarded by ANSSI to firms that meet strict criteria:
Netsystem is qualified on the scopes:
🔎 Organisational audit and physical audit: analysis of organisational and environmental security arrangements.
🧱 Architecture audit: assessment of the robustness of technical choices and their compliance with best practices
Definition of objectives, scope and key players
Interviews, documentation, site visits
Assessment in accordance with ANSSI standards
Clear findings, identified risks, recommendations
Option: prioritisation, monitoring, roadmap, steering
At Netsystem, we know that entrusting the audit of your information system is a strategic decision. That's why our approach as a PASSI-qualified service provider is based on rigour, clarity and transparency at every stage.
Our customers - whether they are OIVs, healthcare establishments or industrial companies - expect much more than a simple inventory: they want concrete, prioritised recommendations, and an expert eye to help them make lasting progress.
As Digital Confidence Manager, I ensure that each assignment scrupulously complies with ANSSI standards, as well as our customers' operational expectations. It's this dual level of requirement that makes our support so strong.Vincent FERRARA, Head of Digital Trust practice