One foundation, all your frameworks
Start with ISO 27001. The rest follows.
ISO 27001 and SOC 2 are our core business. NIS2, DORA, the Cyber Resilience Act and the AI Act rest on the same foundation: the controls and evidence you already have are reused, and you only fill in what's missing.
Our core business
The two frameworks your customers require.
The international reference certification.
Required by large customers in France and Europe. Your ISMS prepared for the certification audit.
Prepare ISO 27001 → SOC 2The report your North American customers expect.
AICPA criteria, Type I or Type II, prepared before the audit firm arrives.
Prepare SOC 2 →Also covered
The regulations coming your way.
European regulations and new requirements from your customers: Nayru covers them on the same foundation of controls and evidence.
Digital operational resilience for the financial sector. Applicable since January 2025 to financial entities and their ICT providers.
Talk about my project →The European directive that extends cybersecurity obligations to thousands of essential and important entities.
Talk about my project →Security of digital products, software included. Vulnerability reporting since September 2026, full application in December 2027.
Talk about my project →The European regulation on artificial intelligence, applying in stages. Concerns software companies that develop or embed AI.
Talk about my project →Your project
Another framework to prepare?
Tell us which one applies to you. We'll come back with a plan suited to your scope and deadline.
A framework waiting for you around the corner?
Let's talk about your timeline: what is mandatory, what your customers ask for, and where to start.