ALL MAJOR POLICIES ARE IN TENACY

ISO 27001

This international standard defines the requirements for establishing, implementing, maintaining and improving an information security management system (ISMS) within an organization.

RGS

The RGS is a security standard drawn up by the French Information Systems Security Agency (ANSSI). It defines the security rules and best practices to be implemented for public administration information systems.

NIS

NIS is a European Union directive designed to strengthen the cybersecurity of critical infrastructures by establishing standards and protection measures for networks and information systems.

PCI-DSS

The Payment Card Industry Data Security Standard (PCI DSS) is a set of data security standards for companies processing payment card transactions.

3CF

The Cyber France Compliance Framework (3CF) is a politique document designed to bring together the various cybersecurity regulations specific to civil aviation.

sOC2

SOC2 is an audit report that evaluates the security and confidentiality controls implemented by technology service providers to guarantee the protection of customer data

TISAX

TISAX is an information security assessment framework used in the automotive industry. It enables companies to share and evaluate the results of security audits in a reliable, standardized way.

NIST

Developed by the US National Institute of Standards and Technology (NIST), this framework provides guidelines to help organizations manage and improve their cybersecurity. It is widely used in France and other countries.

DORA

DORA refers to the “Digital Operational Resilience Act”, a European Union regulatory proposal aimed at strengthening the operational resilience of financial sector entities to risks associated with information and communication technologies (ICT).

HDS

The “Hébergeur de Données de Santé (HDS)” standard for healthcare data security is specific to France. It is intended for service providers who process personal health information.