ReCyF: the 20 ANSSI objectives
The 20 objectives of the ANSSI reference framework for NIS2, in three families, those that apply to essential entities only, and where our services come in.
- Format
- A4 PDF, 1 page
- Size
- 219 KB
- Updated
Downloadable documents
Our fact sheets as PDFs, to keep, print or share with your team.
5 documents
A4 PDF, in French
Updated
All contentA4 PDF, in French
Updated
Audit workbook · IT hygiene
ANSSI IT hygiene guide: audit workbook
To audit your information system against the 42 measures of the ANSSI guide, one by one, with evidence.
What the workbook contains
- The tracking tool: the 42 measures, to tick at standard and at enhanced level
- One sheet per measure: what is at stake, the checkpoints, the evidence to request and the status
- The summary, chapter by chapter
- The action plan
- Format
- A4 PDF, 26 pages
- Size
- 1.2 MB
- Updated
NIS2 and ReCyF
Three sheets to go from the ANSSI framework to your own situation: read it, assess yourself, then review it with us.
Step 1, Read the framework
Step 2, Assess yourself
ReCyF: your self-assessment
One question per objective, to tick yes, partly or no. Every "partly" or "no" is a gap to address.
- Format
- A4 PDF, 1 page
- Size
- 202 KB
- Updated
Step 3, Review it with us
ReCyF express gap review
A free one-hour interview to see where you stand against ReCyF: who it is for, how the hour runs, and the two-page gap sheet you receive.
- Format
- A4 PDF, 1 page
- Size
- 233 KB
- Updated
Fact sheet · PSSI
Your security policy (PSSI) in 7 steps
The seven steps of the programme, what is done in each one, its indicative duration and its deliverables, and the file you receive: the framework PSSI and its five annexes, IT acceptable use policy, technical directives, incidents and crises, continuity and recovery, oversight and compliance.
- Format
- A4 PDF, 1 page
- Size
- 279 KB
- Updated
Official sources
The public texts and guides our sheets build on, so you can read them at the source.
Links checked on 8 October 2026.
NIS2 and ANSSI (France)
- The NIS 2 directive: who is in scope, which obligationsANSSI, in French (new tab)
- MonEspaceNIS2: check whether your entity is in scopeANSSI, in French (new tab)
- ReCyF: the framework and its practical sheetsANSSI, in French (new tab)
- IT hygiene guideANSSI, in French (new tab)
- IT hygiene guide: the 42 measures (PDF, version 2.0)ANSSI, in French (new tab)
- Security accreditation in four steps: the homologation guide (PDF, ANSSI and DINUM, 2025)ANSSI, in French (new tab)
- PSSIE: the French State information security policy (ANSSI)ANSSI, in French (new tab)
- The EBIOS Risk Manager methodANSSI, in French (new tab)
- CERT-FR: security alerts and advisoriesCERT-FR, in French (new tab)
European texts
Personal data and assistance
Standards and methods
- NIST Cybersecurity Framework (CSF) 2.0NIST (new tab)
- ISO/IEC 27001:2022, information securityISO (new tab)
- PTES: the penetration testing execution standardPTES (new tab)
- CVSS 4.0: scoring the severity of vulnerabilitiesFIRST (new tab)
- OWASP Web Security Testing GuideOWASP (new tab)
- OWASP Top 10: the main web application risksOWASP (new tab)
An expert starts from your situation.
An expert reviews your context and replies within 24 business hours.