Assess before acting
No irreversible action until the situation, the urgency and the severity have been framed.
The method · the firm
How we work on a case.
Last updated: 12 September 2026.
An engagement starts by defining the scope and the question to be answered. We then preserve the relevant material, separate facts from hypotheses, carry out proportionate checks, and report our conclusions with their limits and the recommended actions.
01 · THE PRINCIPLES
Four principles that guide every case
These principles put into practice the CODEX, our doctrine of digital risk, which treats cybersecurity as a governance discipline that serves decisions, facts and people.
Prove, always
Digital evidence must be preserved and documented: that is what protects you in any formal process.
Decide clearly
Findings that management can understand, and so can a lawyer or an insurer.
Keep things confidential
Sensitive cases handled with discretion, compartmentalisation and ethical rigour.
02 · THE PROCESS
From assessment to evidence, in the right order
An incident is not handled by doing everything, fast: it is handled by doing the right things, in order. Here is the thread of an engagement, from the free first conversation to the evidence file.
01
First conversation
You describe the situation. Free, confidential, no commitment.
02
Assessment
Establish the urgency and severity, define the right path before taking any action.
03
Securing the evidence
Delete nothing, pay nothing: freeze what matters before it disappears.
04
Forensics & crisis
Investigate the facts, or run the incident response: stabilise, coordinate, communicate.
05
Findings & evidence
A documented, timestamped file that can be exported for your bank, insurer or lawyer.
06
Direction & next steps
Remediation, formal steps, or a handover to the Perso or Pro application.
03 · ESTABLISHED VS ASSUMED
Nothing is decided on an assumption.
The strength of an engagement lies in the rigour of its facts. We separate what is established (and documented) from what is only a hypothesis. That boundary is what protects your formal steps and your decisions.
The established
Established facts
Digital evidence, establishing the facts, intelligence: we collect, preserve and document what actually happened.
- Evidence that is timestamped, preserved and documented
- Usable findings for the bank, insurer, lawyer and courts
- A traceable thread of decisions, from start to finish
The assumed
What we rule out
We would rather say what we do, and what we will not do. That is the foundation of a relationship of trust.
- A best-efforts obligation: we commit to the method, the preservation of evidence and the clarity of the file; the outcome (bank, insurance, courts) belongs to the third parties who decide.
- No hasty conclusions, no irreversible action before the situation has been framed.
- We will never ask for your passwords or your codes.
04 · THE DOCTRINE
Cybersecurity is not a technology. It is a governance discipline.
Our method is not just another procedure: it derives from the CODEX, our doctrine. Three expressions of one mission: advice and decision-making (Pro), investigation and establishing the facts (the firm), assistance and people (Perso).
Download the Executive edition freely (the essentials in twenty minutes) or read it online. The complete Founding edition is distributed on a controlled basis.
A case that needs framing with method?
Tell us about your situation: we assess it, secure the evidence and determine the right path. First conversation free, confidential and with no commitment.