The risk
What could happen if nothing is done? Financial loss, business shutdown, data leak, non-compliance, loss of trust or an uncontrolled critical dependency.
Use cases · organisations
Six situations where Galyct Pro can be used.
The modules can be used separately or together, depending on the need: preparing for compliance, running a crisis, assessing a critical provider, deciding on a budget, preparing for an audit or organising continuity.
Understand the risk. Take back control. Stay the course.
Hosted in France by Scaleway · Mistral AI (EU) · to prepare for and document GDPR, NIS 2 and DORA.
01 · ORIENTATION
The right question is not “which module should we buy?”, but “which decision needs to be made?”
Each situation is read from three angles: the real risk, the evidence available and the expected trade-off. Galyct Pro links all three, because a cyber decision must be explainable after the fact.
The evidence
What material can be used? Logs, timeline, contracts, tickets, alerts, procedures, inventories, matrices and decisions already taken.
The decision
Who must decide, and on what? Management, CIO, CFO, legal, DPO, business units or crisis committee: the module and the deliverable depend on the level of decision.
02 · SIX SITUATIONS
Six situations where Galyct Pro provides an operational framework
For each one: the trigger as you experience it, the concrete contribution of the platform, and the module or framework it leads you to.
Comply with NIS 2 / DORA without waiting for “the date”.
Compliance · DPO / General management TriggerYou may fall among the essential or important entities; a customer, an insurer or a main contractor is already demanding evidence. Transposition is taking shape, and compliance work takes months.
What Galyct Pro bringsThe platform identifies your scope, measures the gap against the requirements (risk management, hygiene, supply chain security, incident notification), structures governance and charts a prioritised trajectory, with management’s accountability documented.
NIS 2 · DORA frameworks →Ransomware, compromised account, leak: take back control without destroying the evidence.
Cyber crisis · CIO / General management TriggerEDR alert, isolated machine, suspicious administrator account, ransom demand, payment fraud, abnormal activity on the information system or unexpected third-party access. The first priority is not to erase everything.
What Galyct Pro bringsThe crisis cell qualifies the scope, opens a timestamped decision log (0 to 72 h), preserves the chain of evidence and steers continuity then remediation: a reading shared by management, IT, legal and the business units.
Incident management module →Key provider, single managed service provider, cloud dependency: keep the chain under control.
Third-party risk · CIO / Purchasing TriggerDependence on a critical provider, supplier security questionnaire, compromised provider: supply chain security is becoming an increasingly important requirement of NIS 2 and DORA.
What Galyct Pro bringsThe platform maps your third parties, assesses and tracks their exposure, links each dependency to a business impact and records the evidence, so that you can decide on and document supply chain risk, not merely observe it.
Managing third-party risk →Tell real risks apart from technical irritants before committing a budget.
Audit & maturity · Executive committee / CIO TriggerA cyber budget to be approved, a new information system, a change of managed service provider, a request from an insurer, a customer audit or simply doubt about the real level of security.
What Galyct Pro bringsThe platform links risk to a budget decision: maturity diagnosis, gap register, EBIOS RM scenarios, ROSI and short/medium-term priorities, enough to defend a trade-off before the executive committee.
Deciding on a cyber budget →Pass an audit ahead of a customer or a cyber insurer.
Compliance · DPO / Legal TriggerSecurity questionnaire, customer inspection, cyber insurance, data incident, incomplete record or unclear roles: you need to produce consistent, verifiable material.
What Galyct Pro bringsThe platform aligns your evidence with how things really work: gap mapping, ISO 27001 evidence register, governance and action register. You document what you do, not the other way round.
Pass an audit →An activity depends on an ERP, a business platform or a single provider.
Continuity · General management / Business units TriggerCritical ERP, business platform, cloud dependency, single managed service provider, risk of a long outage or a continuity requirement imposed by a customer.
What Galyct Pro bringsThe platform links business impacts, recovery times and technical dependencies: BIA, outage scenarios, RTO/RPO objectives, BCP/DRP and prioritisation of tests: continuity that can be tested, not theoretical.
BIA · BCP · DRP frameworks →
03 · THE METHOD
Signal → qualification → action → evidence
Whatever the case, the platform follows the same discipline: turning a blurred situation into a structured, traceable decision. Six stages, one common thread.
1DiagnosisWhere you really stand: maturity, gaps, priorities.
2MappingAssets, risks, third parties and critical dependencies.
3PrioritisationReal risks vs irritants, EBIOS RM scenarios, ROSI.
4DecisionRecorded trade-offs, defensible before a committee.
5EvidenceTimestamped register: you document what you do.
6TrajectoryPrioritised plan, milestones, indicators, follow-up over time.
04 · HOSTING AND DATA
Why Galyct Pro for these cases
NIS 2 extends the European framework to several thousand organisations, across some eighteen sectors. Dealing with these subjects requires a foundation of trust: hosting, AI and evidence, processed in the European Union.
Hosting in France
Data hosted in France with Scaleway, according to the published architecture; subcontractors in the EU where applicable.
Mistral AI (EU)
Mistral AI assistant, operated in the European Union, under human oversight.
Evidence kept
Timestamped log and evidence register, usable before a committee and with a third party.
Multi-jurisdiction
8 interface languages and a regulatory clock adapted to your jurisdiction and your deadlines.
05 · WHAT WE DO NOT PROMISE
What these use cases do not promise you
Galyct Pro does not turn a weak signal into a certainty. What we commit to: usable findings, traceable decisions and a trajectory that is followed through.
No zero risk
No guarantee that there is no risk after a limited check. We qualify, document and prioritise with method.
No attribution without evidence
Identifying a perpetrator or a group requires solid evidence. A hypothesis must not become a certainty.
Compliance linked to real practices
No decorative report without a prioritised action plan. Documentation must reflect real practices.
No automated legal decision
Notification, filing a complaint, external communication or activating insurance are qualified with the competent contacts.
A cyber crisis in progress?
Suspected intrusion, ransomware, compromised critical account, data leak: stabilise without destroying the evidence, and get support. We open a crisis cell and keep the thread of decisions.
Your situation, in your context: request a demo.
A 30-minute live demo on the case that concerns you, or start on your own with the free executive diagnosis. No commitment.