Turning ISO 27001 into a Strategic Opportunity: Testimony from Hospices Civils de Lyon
A Leading Institution, a Demanding Environment
As France’s second-largest university hospital center, the Hospices Civils de Lyon (HCL) encompasses 13 healthcare institutions and over 23,000 professionals.
Operating at the crossroads of public health, sensitive data protection, and strict regulatory requirements, HCL launched a structured initiative toward ISO 27001 certification in 2021.
The objective: achieve certification within one year on a strategically selected pilot scope.
A bold challenge—met with method, precision, and determination.
A Structured Yet Agile Approach
From the outset, the project followed a rigorous yet pragmatic strategy.
EGERIE was chosen as the central platform to manage ISO 27001 risk assessments in a centralized, collaborative manner.
Why EGERIE?
HCL quickly identified three key advantages:
– Centralized risk analysis: All information is consolidated in a single, traceable, audit-ready repository.
– Structured cyber governance: A dynamic risk map and continuous tracking of action plans strengthen day-to-day security management.
– Accelerated momentum: The platform’s functional depth—such as automated measure suggestions and prequalification questionnaires—enables faster, more scalable execution.
The result: A well-controlled project that brings clarity and agility to a complex organization.
From Compliance to Continuous Governance
With EGERIE, HCL has laid the groundwork for long-term cybersecurity governance:
Conducting regular risk assessments aligned with ISO 27001 compliance
Continuously managing risks and corrective actions
Equipping decision-making bodies—executive committees, steering groups, and others—with consolidated, real-time dashboards
Preparing to scale the approach across broader scopes, including additional certifications and the NIS2 directive
“Today, EGERIE not only helps us stay compliant—it enables better risk management and actively supports our digital transformation.”
Key Results
– ISO 27001 certification achieved on the pilot perimeter, followed by broader organizational deployment
– 4 platform users effectively managing the entire process– 40+ risk analyses conducted and centralized in a single repository
– 1 unified risk assessment supporting multiple frameworks (ISO 27001, HDS, NIS2, etc.)
– Widespread engagement from business teams across departments
You may be interested in this content
Every business has its challenges. Learn how our solutions have helped our customers overcome them and strengthen their cybersecurity.
Lorem Ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod temporincididunt ut labore and Dolore Magna aliqua.