A reading for each role
The same data, presented at the right level: decision for management, risk for the CISO, evidence for the DPO, impact for the business units.
The platform, seen from where you sit
What Galyct Pro brings to each role
An executive, a CISO, a DPO and a finance director do not carry the same risks or make the same decisions. Galyct Pro adapts the reading, the priorities and the deliverables to your role, without drowning anyone in purely technical talk.
Understand the risk. Take back control. Stay the course.
Hosted in France by Scaleway · Mistral AI (EU) · to prepare for and document GDPR, NIS 2 and DORA.
01 · YOUR ROLE
What is your role in the decision?
Each role comes in through its own concern: accountability for the executive, risk control for the CISO, evidence for the DPO, continuity and budget for finance, and the thread “from signal to evidence” for the analyst.
02 · GENERAL MANAGEMENT
Executive: decide fast, without deciding blind
Your accountability commits the organisation. You need an honest reading of your exposure and documented decisions, not one more technical dashboard.
The stakes
What concerns you
Knowing where the organisation really stands, deciding on a cyber budget, living up to your accountability and protecting the reputation, without being drowned in jargon.
- Where do we really stand, beyond the reassuring reports?
- Where should the money go first, and why?
- Am I able to explain my decisions after an incident?
What Galyct Pro brings
What the platform changes
A readable cockpit that links risk to priorities and traceable decisions, which an executive committee can understand in ten minutes.
- Maturity scale, from “Exposed” to “Resilient”
- Continuous executive diagnosis, ranked priorities (ROSI)
- Management summary and timestamped decision log
03 · CIO · CISO
CIO / CISO: steer the risk and hold the line in a crisis
You carry the risk day to day and you are on the front line on the day of the incident. You need a tool that brings structure without destroying the evidence.
The stakes
What concerns you
Mapping the risk, running an incident without premature erasure, prioritising a large remediation effort and keeping to the trajectory over time.
- Many findings, no clear order of execution
- Suspected intrusion, ransomware, compromised critical account
- Getting the right alerts to the right place
What Galyct Pro brings
What the platform changes
Risk becomes readable, the crisis is run along a dated thread of decisions, and remediation turns into a prioritised plan you can steer.
- Mapping, EBIOS RM scenarios, matrix and trade-offs
- Timestamped playbooks, crisis cell, decision log
- Acronis and MISP connectors, CERT-FR watch · evidence register
04 · DPO · LEGAL
DPO / legal: compliance that reflects reality
With customers, insurers and the regulator, cosmetic compliance does not hold up. You need material that is consistent, verifiable and aligned with how things really work.
The stakes
What concerns you
Answering a security questionnaire, formalising governance, notifying a breach on time and proving what the organisation really does.
- Incomplete record, roles and responsibilities not clarified
- Breach notification to be made within 72 hours
- A customer audit or an insurance requirement to pass
What Galyct Pro brings
What the platform changes
Documentation that flows from practice, linked to the frameworks your stakeholders require, because a cyber decision must be explainable after the fact.
- ISO 27001, NIS 2, DORA, GDPR · gap mapping
- Record, impact assessments, 72-hour CNIL notification
- Evidence linked to decisions, without decorative compliance
05 · CFO · BUSINESS UNITS
CFO / business units: continuity, fraud and budget
Your reading is financial and operational: what must not stop, what costs money, what exposes the company to fraud or a service disruption.
The stakes
What concerns you
Linking business impacts to recovery times, securing payments, controlling dependence on providers and making the cyber budget something you can decide on.
- Activity dependent on a critical system or a key provider
- Fake bank details, payment fraud, unusual payment order
- Justifying an expense without overstating or downplaying the risk
What Galyct Pro brings
What the platform changes
Dependencies become visible, continuity gets tested, and a fraud can be reconstructed into a decision file usable with the bank or the insurer.
- BIA · BCP · DRP · outage scenarios (RTO / RPO)
- Tracking of third-party risk and the provider chain
- Fraud timeline, preservation of evidence, summary file
06 · ANALYST · SOC
Analyst: from signal to evidence, without losing the thread
You qualify artefacts and reconstruct the timeline. You need to link a signal to an analysis, an incident and a remediation, without re-entering anything, and with a record.
The stakes
What concerns you
Sorting out the noise, quickly qualifying a link, an email, a domain or an indicator, keeping the exact timeline and turning an analysis into a tracked action.
- Artefacts scattered across several tools
- Qualifying an IOC, a domain, an email header, a link
- Linking the analysis to the incident and the remediation
What Galyct Pro brings
What the platform changes
A single thread: signal → artefact → analysis → IOC → timeline → incident → remediation. Each qualification stays recorded and attached to the case.
- Analysis of IOCs, headers (SPF/DKIM/DMARC), domains, links
- IOC library, timestamped timeline, pivots
- CVE / CERT-FR watch · attachment to the incident and the evidence
07 · ONE AND THE SAME CONSOLE
Different roles, a single source of facts
Each role reads what concerns it, but everyone looks at the same facts. What feeds the CISO feeds the executive’s summary, which feeds the DPO’s evidence.
Traceable decisions
Every trade-off is dated and documented: the thread of decisions serves as the official log for the insurer as well as the regulator.
Hosted in France by Scaleway, by design
Hosting and processing in France, with Scaleway; Mistral AI assistant (EU), under human oversight. Your governance data stays with you, under your control.
08 · WHAT WE DO NOT PROMISE
What we will promise to no role
Whatever your role, we oversell nothing. Cybersecurity reduces risk and improves the ability to respond; it does not bring any risk down to zero.
“No zero risk, no attribution without evidence, no cosmetic compliance, no decorative report. No result is guaranteed in advance.”
Our commitment to honesty
“The platform will never ask you for your passwords or your codes. What we commit to: usable findings and traceable decisions.”
Our principle of trust
See Galyct Pro from your role.
A 30-minute live demo, focused on your role and your context: executive, CISO, DPO or finance. Or start on your own with the free executive diagnosis. No commitment.