Cybersecurity & NIS2

Small and mid-sized businesses are now the prime targets of ransomware and phishing. We apply the same security policy to every one of your devices, check it every day, and help you comply with the frameworks that apply to you: NIS2, the guidelines of ANSSI (the French national cybersecurity agency), GDPR, ISO 27001 or CIS.

What's included

Device hardening

Macros, scripts, autorun, anti-ransomware rules: the most common attack routes are closed off.

Daily security checks

Adware, suspicious browser extensions and notifications, internet exposure.

Security score out of 100

Each device is given a score that is recalculated every week, so you can track progress over time.

Encryption and allowlisting

Encrypted disks with a backed-up recovery key, and only approved software is allowed to run.

Incident response

Remote isolation of a compromised device, and a dedicated procedure for Microsoft 365 accounts hit by phishing.

Compliance tracking

Assessment against ANSSI, NIS2, ISO 27001, DORA, GDPR, CIS v8 and our own baseline for SMEs, with progress tracked over time.

Who is it for?

Designed for small and mid-sized businesses

Organisations within the scope of NIS2, subject to the requirements of a cyber insurer or a major client, or that simply want to avoid ransomware.

Contracts you can cancel at any time.

Frequently asked questions

Does NIS2 apply to my business?

The NIS2 directive covers medium-sized and large organisations in many sectors (healthcare, transport, energy, manufacturing, digital services and more). Take our free test for an initial estimate, then we will refine it together against the French transposition law, which was still before Parliament in autumn 2026.

What should we do if an employee has clicked on a phishing link?

Contact us immediately (the first steps are described on our Cyber emergency page). We secure the account (password, sessions, mailbox rules), analyse what happened and check that no fraudulent emails have been sent from your domain.

Is cybersecurity included in managed IT?

Baseline device protection (hardening, daily checks, encryption, security score) is included for every monitored device. Audits and compliance projects are covered by a separate proposal.

Let's review your IT

A 30-minute call to review your IT, with no obligation. And a contract you can cancel at any time.

Book a call

+33 1 88 32 11 32 ·contact@jesto.fr

Support