Risk Management

Compliance

+ 2000 employees

Health

SESAN: Reducing Time-to-Value and Industrializing Risk Analyses in the Healthcare Sector

In the Paris region, SESAN supports healthcare institutions in securing their information systems. Using EGERIE, the GRADeS has implemented a structured, centralized, and multi-framework approach to industrialize risk analysis in this highly specialized sector.

Rémi Tilly

RSSI

Watch

See the testimonial

The challenge

Healthcare facilities are on the front lines of cyberattacks.

They operate in a complex regulatory environment, face a broad attack surface, and often have limited resources.

SESAN set out to:
– Replace outdated Excel and Word-based processes, which no longer meet the growing demands of healthcare institutions—particularly hospital groups (GHTs)
– Standardize risk analyses while accommodating local specificities
– Provide a centralized, scalable solution for all healthcare stakeholders across the Île-de-France region

‍

The solution

SESAN selected the EGERIE platform to provide long-term support for healthcare organizations.

EGERIE delivers a comprehensive solution that includes:

A 360° view of risk, interconnecting assets, business processes, safeguards, and threats

A multi-framework approach aligned with key sector standards such as PGSSI-S, HDS, ISO 27001, and more

Ready-to-use templates, reusable libraries, and automated reporting to streamline and standardize risk assessments

A management interface that helps prioritize actions based on cost, effectiveness, and risk exposure

The results

Tangible results:

66% reduction in risk analysis time: from 3 weeks to just 1, thanks to pre-built templates

Report generation time divided by 7: from 1 week to 1 day, with dashboards and risk tagging by domain to better inform executive decisions

Improved compliance monitoring through multi-standard visibility

Clear dashboards and risk categorization offer greater transparency for leadership and facilitate stakeholder involvement

Centralized data in a single platform eliminates silos and supports a collaborative approach across the organization

"The strength of the EGERIE platform lies in its fully connected ecosystem—linking assets, safeguards, and risks. It allows for in-depth analysis while maintaining a 360° view. Its centralization and adaptability significantly accelerate time-to-value."

Rémi Tilly

RSSI

Key figures

66% time saved on risk analyses

7× faster consolidated report production

1 centralized platform for all healthcare structures in Île-de-France

100% multi-framework support: PGSSI-S, HDS, ISO 27001…

TESTIMONIES

You may be interested in this content

Every business has its challenges. Learn how our solutions have helped our customers overcome them and strengthen their cybersecurity.

Discover the use cases

As a major player in social protection, MGEN has transformed its cyber risk management strategy by adopting Egerie as its core GRC platform. The days of complex, rigid Excel files are gone — replaced by a streamlined, continuous approach that benefits both internal teams and external auditors, particularly in the context of ISO 27001 certification.

MGEN: Moving Beyond Excel to Professionalize Cyber Risk Management

No Excel since the start of 2024: 100% managed in Egerie

10+ potential GRC users over time

1 single tool to centralize cyber governance

ISO 27001 audit 2024: risk management cited as a key strength by the auditor

Discover the use case

A leading financial institution in France, La Banque Postale serves individuals, businesses, and the public sector with a strong commitment to security and compliance. The organization overhauled its risk analysis methodology to improve efficiency, transparency, and its overall risk culture.

La Banque Postale: Scaling and Industrializing Cyber Risk Management

500+ risk analyses per year

4,996+ supporting assets identified

5,702+ security safeguards mapped

1,769 risk scenarios modeled

Discover the use case

To support its rapid growth and the growing complexity of its global supply chain, Decathlon implemented an integrated cybersecurity governance model—rooted in risk analysis and powered by the EGERIE platform.

Decathlon: Building a Unified, Risk-Driven Cybersecurity Approach

500+ risk analyses performed per year

4,996 assets and 5,702 security measures modeled

1,769 risk scenarios designed and evaluated

Discover the use case

How do you turn a regulatory constraint into a catalyst for cybersecurity performance? That’s the challenge the Hospices Civils de Lyon (HCL) successfully met—with support from EGERIE—by launching a project that aligned their cybersecurity practices with ISO 27001 requirements, transforming compliance into a strategic asset rather than a mere obligation.

Turning ISO 27001 into a Strategic Opportunity: Testimony from Hospices Civils de Lyon

ISO 27001 certification achieved on the pilot perimeter, with subsequent broader rollout.

40+ risk analyses conducted and centralized

1 unified risk assessment supporting multiple frameworks (HDS, ISO 27001, etc.)

4 platform users

Discover the use case

MGEN: Moving Beyond Excel to Professionalize Cyber Risk Management

No Excel since the start of 2024: 100% managed in Egerie

10+ potential GRC users over time

1 single tool to centralize cyber governance

ISO 27001 audit 2024: risk management cited as a key strength by the auditor

Découvrir le cas d’usage