Advice and decision-making
Governance, risk analysis, continuity, crisis management. The doctrine serving decisions, so that the decision comes before the crisis. That is Galyct Pro.
Discover Galyct Pro →The doctrine · Founding edition
The CODEX: our doctrine of digital risk.
The CODEX brings together the principles, methods and convictions that guide every Galyct case. It treats cybersecurity not as a technology, but as a governance discipline, serving decisions, facts and people.
Executive edition free · Founding edition distributed on a controlled basis.
Founding edition
10 Books · 130 chapters
Book I, The foundations▸
Book III, Governing risk▸
Book IV, Digital investigation▸
Book V, Handling incidents▸
Book VIII, The mission▸
Every chapter
a maxim · “The essentials”
MAXIM I
Cybersecurity is not a technology. It is a governance discipline.
The CODEX brings together the principles that frame our analyses, our decisions and our reports. It serves as a shared reference for the firm and for Galyct’s products.
The CODEX depends on no tool and no trend: it is the foundation of the brand and will outlive it. Technologies will evolve, threats will change, regulations will be replaced. The principles will remain.
01 · THE DOCTRINE
One brand, one firm, three applications
Galyct is a single brand: a firm and three applications, brought together by the CODEX. One conviction links them: protecting an organisation means protecting its ability to pursue its mission despite uncertainty. It takes three complementary forms.
Investigation and establishing the facts
Digital evidence, establishing the facts, intelligence. The doctrine serving established facts, so that nothing is decided on an assumption. That is the firm.
Talk to the firm →Assistance and people
Supporting victims, the human side of an incident. The doctrine serving people, helping those who have been hit get back on their feet. That is Galyct Perso.
Discover Galyct Perso →
MAXIM II
Protecting an organisation means protecting its ability to pursue its mission.
A cyber incident does not damage machines first. It damages trust: that of your clients, your users, your teams, and it threatens your ability to pursue your mission.
The CODEX describes risk as it is, not as people imagine it: its figures and examples are based on the published work of ANSSI, ENISA and CERT-FR. Risk cannot be eliminated: you face it squarely and you control it.
02 · THE PRINCIPLES
A few reference points for decision-making
Extracts from the doctrine. To keep in mind not as slogans, but as reference points for decisions.
The environment, no longer the tool
Cyberspace is no longer a tool of the organisation: it has become the environment in which it operates.
A governance responsibility
Cybersecurity does not belong to one department. It is a governance responsibility carried collectively by the whole organisation.
Protect the missions first
A mature organisation protects its missions first. Digital assets are protected only because they make those missions possible.
Responsibility cannot be outsourced
Outsourcing transfers operations. It never transfers strategic responsibility for continuity, trust and resilience.
A business continuity plan that works
The real Business Continuity Plan is not the one that is written down. It is the one that works when the usual procedures stop working.
Deciding under uncertainty
A leader’s mission is not to eliminate risk. It is to take decisions that are proportionate, documented and owned, despite uncertainty.
≈ 60 %
of intrusions begin with phishing: the first way in is not a sophisticated exploit, it is a human being who clicks. We describe risk as it is, not as people imagine it, and we never promise zero risk.
Source of the figure: ENISA Threat Landscape 2025 (October 2025: analysis of 4,875 incidents, July 2024 to June 2025). Other figures based on the published work of ANSSI and CERT-FR.
03 · THE TEN BOOKS
From the foundations to the mission
The Founding edition develops the doctrine in depth: one hundred and thirty chapters, each opening with a maxim and closing with “The essentials”. Each Book prepares the next.
The foundations
Why digital security exists and what it really protects: the mission, trust, continuity.
Understanding the adversary
Threat actors, the attack cycle, social engineering, the economics of cybercrime, attack frameworks.
Governing risk
Thinking in terms of missions before assets, EBIOS RM, resilience, BCP / DRP, cyber crisis management.
Digital investigation
Evidence, chain of custody, volatility, acquisition and multi-system forensics, the expert report.
Handling incidents
The first hours, the crisis unit, roles, communication, authorities and obligations.
Cyber intelligence
Seeing before understanding: sources, cognitive biases, attribution, anticipation, information superiority.
Leading
Authority, judgement, courage, responsibility, unity of command, deciding under uncertainty.
The mission
Purpose, duty, the common good, loyalty, legacy, vigilance: what gives meaning to the means.
In the appendix: case studies & analyses: a town hall brought to a standstill, fraud in an SME, a law firm, a health and social care organisation, and the real-life case of Corbeil-Essonnes (2022).
MAXIM III
Maturity is not measured by the number of tools, but by the quality of decisions.
The decisions that matter (what to protect, what to require of your provider, how to react, whether to pay a ransom) cannot be delegated. They belong to the person in charge.
The Executive edition condenses the essentials so you can decide in twenty minutes. The Founding edition develops the complete doctrine. Two uses, one standard.
04 · THE EDITIONS
Read the CODEX
Two editions, two uses: the essentials for deciding, and the complete doctrine for going into depth.
The essentials for deciding.
For leaders of very small businesses, SMEs and small organisations. You don’t need to become an expert: you need to know how to decide.
- Understand: cyber is a decision, not a technology.
- Govern: vital missions, five fundamentals, continuity.
- React: assess without destroying, don’t pay, notify within 72 h.
- A tear-off memo: ten actions, three questions to ask your provider.
PDF · 24 pages · ~20-minute read · instant download.
The document is sent immediately. We keep your address to let you know about updates, nothing else.
The complete doctrine.
A doctrine of cybersecurity, digital resilience and investigation. A reference document, provided in exchange for your professional contact details.
- Ten Books, from the foundations to the sources.
- One hundred and thirty chapters, each opening with a maxim and closing with “The essentials”.
- Case studies and analyses, including Corbeil-Essonnes (2022).
- Sent by email after a short form; reproduction subject to permission.
Reference · 173 pages · 10 Books · 130 chapters · PDF.
© 2026 Galyct. Executive edition free to share; Founding edition distributed on a controlled basis: a reference doctrine, reproduction or distribution subject to prior written permission.
A cyber decision to make, a case to frame?
The CODEX guides every Galyct engagement. Depending on your situation, a first conversation with an expert (no commitment, no sales pitch) gets you to the right place.