New eBook available! - CISO and GRC: 7 levers to structure your cyber risk management

All-in-one cyber GRC platform. AI-powered.

With Egerie, go beyond compliance (ISO, NIS 2, DORA, etc.) and turn it into a driver of cybersecurity governance: identify and assess risks, quantify their business impact, and proactively manage your cyber posture.

Discover the platform Request a demo

Hello Pierre.

State what you want to do — or pick up from one of your workspaces.

Send

Jerry is preparing your report

Reading NIS2 and DORA programs
Consolidating statuses and scores
Formatting for management

Compliance Report · NIS2 and DORAPrepared by Jerry September 9, 2026DownloadSend to management

Compliance Report

NIS2 and DORA

Compliance status and action plan

ReCyF NIS2 (FR v2.5) · DORA (EU) 2022/2554

355Requirements

414Measures

1475Tasks

85Overdue

1Executive Summary

Both NIS2 and DORA programs cover the entirety of their respective frameworks (152 and 203 applicable requirements). Four DORA requirements remain non-compliant without an active waiver, blocking overall compliance. Three waivers are currently in progress. The action plan has 85 overdue tasks, concentrated on logging, incident management, and governance. Official scores are 76.97% for NIS2 and 64.04% for DORA.

4Blocking requirementsNon-compliant without an active waiver.

2Overview

4Blocking3 covered by a waiver

355Applicable requirements0 excluded from scope

85Overdue tasksout of 1475 tasks

3Active waiversnext expiry on March 8, 2027

Requirements by status · 355 applicable

355

Compliant 244
Partially compliant 102
Non-compliant 4
Ready for validation 2
Accepted gap 3

Measures by observed state · 414 measures

364

In place 252
Partial 106
Absent 6
Excluded 0

Over 500 businesses trust us

Your situation

Do you recognize yourself?

Four situations you might be living through. And what changes with Egerie.

AVEC EGERIE →

One week later, you have a prioritized action plan and the list of evidence to provide. Not an 80-page PDF.

What you're owed, sorted by priority

Expected evidence, named in advance

First batch launched next week

AVEC EGERIE →

Your existing setup counts from day one. Gaps are named, assigned, and followed up on. Evidence is collected continuously, not the night before the audit.

Your existing setup taken as-is

Gaps named, assigned, followed up on

Evidence collected continuously

AVEC EGERIE →

You show the real state of your defenses, with supporting documents. Not a hurried declaration on honor.

An up-to-date status, not a statement

Documents attached to each defense

Ready-to-use answers when asked

AVEC EGERIE →

Your risks come pre-built, and they evolve: if a defense drops, it shows up the same day in the risk it was covering.

Pre-built risks

Recalculated when a defense changes

The decision remains yours

Compliance

De la norme à l'exécution : un programme clair, priorisé et prouvable, sans surcharger vos équipes

Le travail arrive écrit : mesures, tâches et preuves attendues, affectées à leurs porteurs

Une mesure tenue pour NIS2 compte aussi pour ISO 27001 et DORA

Jerry, déjà disponible, distribue, relance et prépare vos rapports

Request a demo

Risk Analysis

Strengthen your cybersecurity by accurately mapping your cyber risks

“Being in compliance does not mean being fully protected.”Start identifying the risks your organization is exposed to and address them based on how they impact your business.

Discover the platform

Third-party management

Manage and oversee your third parties over the long term.

Identify and qualify your third parties, and evaluate them using questionnaires tailored to their criticality. Consolidate scoring, risks, and action plans to manage and track supplier cyber risk over time.

Discover the platform

Quantification

Mesurez vos risques en euros pour arbitrer avec votre direction.

Identify and qualify your third parties, and evaluate them using questionnaires tailored to their level of criticality. Consolidate scoring, risks, and action plans to manage and track your supplier cyber risk over the long term.

OUR SERVICES

One platform. Four pillars.

Instead of juggling multiple cybersecurity tools, choose Egerie, an integrated platform that simplifies your cyber management. It guides you at every level of maturity by effectively addressing compliance, cyber risks, and their financial impact.

Gestion des risques

Cartographie et qualification des tiers

Campagne d’évaluation via forms

Conformité

Multi-Méthode

+120 frameworks

Analyse des risques

Cartographie des risques

Plans de traitement

Quantification

Méthodologie FAIR

Univers des risques

Third-party management

Evaluation campaign via forms

Mapping and qualification of third parties

Compliance

Multi-Method

Risk mapping

Risk analysis

Risk mapping

Treatment plans

Quantification

FAIR Methodology

Risk Landscape

Cyber Governance

EGERIE CONTENT

Our AI-powered technology, validated by experts, that accelerates your compliance.

Egerie Content, our AI-powered tech, validated by experts, that accelerates your compliance.

Requirements → Measures → Tasks → Evidence, already linked

Every framework arrives translated into concrete actions. You don't interpret the standard; you apply it.

One measure counts for multiple standards

The overlaps between NIS2, ISO 27001, and DORA are built into the content. A defense maintained once counts everywhere it is required.

Your existing setup taken into account from day one

What you have already built is recognized as an active defense. You aren't replaying ten years of work.

Counts for NIS2 · ISO 27001 · DORA

120+ frameworks available, a single source of truth

Reduce time spent on audits by up to 70%

Turn compliance into a governance lever

PLATFORM

See. Understand. Decide. Hold the line.

See, understand, decide: good guidance gets you there. Sustaining it starts afterward, in the day-to-day work—the kind that ensures a defense built today still holds up six months from now. That is where Egerie stays by your side.

See

Understand

Generate your plan of action

Hold the line

See the real state of your defenses

Say goodbye to scattered spreadsheets — align all your analysts and foster collaboration. Gain consistency, easily compare and consolidate the results of every risk or compliance analysis into a single source of truth.

Discover the platform

Tableau de bord avec un menu déroulant pour sélectionner des organisations et deux graphiques montrant la probabilité et la gravité des risques ainsi que le total des risques élevés sur 290.

Industrialize your practices

Increase efficiency by leveraging one of the many resources available on MyEgerie (120+). Standardize your approach and scale the number of analyses without duplicating your efforts.

Discover the platform

Tableau de bord des risques et des contrôles appliqués montrant 176 risques élevés sur 290, 45 % d'avancement du plan de traitement, 62 % de complétion globale, 33 % de contrôles appliqués, avec 7032 contrôles totaux et 41 % de contrôles appliqués planifiés détaillés par catégories.

Generate your plan of action

The gap is broken down into batches ordered by priority, along with their workload. The target confidence level is chosen defense by defense. These decisions bear your name.

Discover the platform

Tableau de bord affichant un calendrier de janvier 2025 avec les jours 4 et 22 entourés, un taux de réalisation global de 36 %, un coût de 528 000 € et une charge de travail de 349 hommes-jours.

Reduce your impacts

Tasks are assigned to their owners, overdue items are followed up on, and evidence is collected and verified. On the Compliance module, Jerry handles this and only brings up what awaits your decision.

Discover the platform

Tableau présentant la réduction des risques à 42 % et la réduction des risques programmée à 64 %, les coûts avec 840 K € pour la réduction des risques et 283 M/D pour la charge, et une quantification financière avec des barres horizontales pour les scénarios minimal, le plus probable et maximal.

See

See the real state of your defenses

Discover the platform

Understand

Industrialize your practices

Increase efficiency by leveraging one of the many resources available on MyEgerie (120+). Standardize your approach and scale the number of analyses without duplicating your efforts.

Discover the platform

Generate your plan of action

The gap is broken down into batches ordered by priority, along with their workload. The target confidence level is chosen defense by defense. These decisions bear your name.

Discover the platform

Hold the line

Reduce your impacts

Discover the platform

Monitor your progress

Get all the indicators you need in real time to measure the progress of your cyber programs. Generate your reports in a few clicks and speak the same language with your management.

Discover the platform

Tableau de bord de gestion des risques affichant 229 contrôles appliqués, 33,4%, avec un graphique en barres coloré et une liste des statuts des contrôles et des risques actuels et résiduels.

And others...

INTÉGRATIONS

Connect all your favorite tools with Egerie

TESTIMONIES

See the impact of our platform through their stories

Every company has its own challenges. Discover how our platform helped our clients overcome them and strengthen their cybersecurity posture.

"What’s great about Egerie is how everything is connected. If we change something at the beginning of the analysis, the whole chain updates automatically. It saves us a huge amount of time and makes our work much more relevant."

Florian Bourdon

Cyber GRC Expert, MGEN

"The tool enabled us to industrialize a previously manual approach. More importantly, it helped engage business teams in the risk management process."

Béatrice Berard

Information Systems Security Officer, HCL

"We all know there’s no business without risk. But we must be able to give business teams the right information so they can make the right decisions. And that’s exactly what we’re doing with Egerie."

François Sopin

Head of Department – Cybersecurity Direction

KING

MGEN transforms risk management:by replacing Excel spreadsheets with the Egerie platform. The result? A 70% reduction in analysis time, zero consulting fees, and a shift from annual updates to continuous oversight. With immediate ROI, smoother ISO 27001 audits, and real-time visibility, Egerie empowers smarter, faster cyber decisions.

Learn more

KING

The Hospices Civils de Lyon have turned ISO 27001 into a true driver of progress. With support from EGERIE, they achieved certification in less than 12 months for a pilot scope—centralizing over 40 risk analyses in a single repository, all managed by just four users. A single analysis now supports multiple frameworks (ISO 27001, HDS, NIS2), significantly accelerating time-to-value and reducing audit workloads. Real-time dashboards provide continuous visibility to decision-making bodies, facilitate scope expansion, and ensure sustained cybersecurity governance. The outcome: faster compliance, reduced operational burden, and immediate return on investment.

Learn more

KING

La Banque Postale industrialises its risk analysis: over 500 assessments are carried out each year thanks to Egerie’s ready-to-use models, with centralised data ensuring clear governance and a standardised approach that shortens time-to-value. Responsibility is delegated to business units, speeding up delivery, informing budget decisions, and fostering a widespread cybersecurity culture. The result: 360° visibility, broader coverage, and immediate ROI driven by the speed, reliability, and scalability of the approach.

Learn more

MARKET LEADER