RGSSI
01 · Governance and security policy
Compliance programme · CISO as a Service
An appointed security officer, a security policy approved by management and a steering committee that actually meets: the foundation of any programme.
CYBERSECURITY & COMPLIANCE
Where do you stand on
the security audit obligation?
From maturity assessment to the RGSSI audit, we support organisations through their cybersecurity compliance journey, including personal data protection and technical security.
Decree 2021-917RGSSI v2025Audit deadline: 2027Law 2013-450 · personal data
Reference framework: Côte d’Ivoire regulations. Outside Côte d’Ivoire, the assessment remains a reliable maturity benchmark, but the obligations cited do not apply as such.
SAMPLE RESULT
A clear profile,
in 15 minutes.
27 questions across 9 domains, four possible answers for each. The result appears immediately, with no need to wait for a meeting.
- An overall score and your maturity level
- A radar across the 9 domains, compared with the target level
- Your strengths and areas of concern
- Your first workstreams, linked to our offers
Fictitious example
2.2/ 4Emerging
OUR OFFER
Nine domains,
one roadmap.
Each domain of the assessment maps to a service our experts can deliver on its own or as part of end-to-end support.
Decree 2021-917
02 · RGSSI compliance and audit obligation
RGSSI audit readiness · PASSI audit
Gap measurement against the RGSSI, a compliance plan and preparation for the regulatory audit ahead of the 2027 deadline.
Law 2013-450
03 · Personal data protection
DPO as a Service
An appointed personal data lead, an up-to-date record of processing activities and filings with ARTCI in order.
ISO 27005
04 · Risk and asset management
Diagnostic · Compliance programme
Asset inventory, a formalised risk analysis and a prioritised, tracked treatment plan.
ISO 27001
05 · Technical security and architecture
Architecture audit · Penetration test
System hardening, network segmentation and encryption of sensitive data, verified by testing.
RGSSI
06 · Identity and access management
Configuration audit · Compliance programme
Least privilege, strong authentication (MFA) on sensitive access and periodic rights reviews.
Incident notification
07 · Incident detection and response
Crisis simulation · CISO as a Service
Log monitoring, an incident response plan and a notification procedure, tested through exercises.
ISO 22301
08 · Business continuity
BCP-DRP
Tested backups, documented continuity and recovery plans, regular exercises.
RGSSI
09 · Security awareness and culture
Training and certification · Awareness
Regular staff training, phishing test campaigns and executive involvement.
A SIMPLE SCALE
Four answers,
one target level.
The target level is “Formalised”: a practice that is written down and applied everywhere, the minimum expected to approach an external audit with confidence.
Absentnothing in place1
Informaldepends on individuals2
Formalisedwritten, applied everywhere3
Measuredmeasured, continuously improved4
APPROACH
From assessment
to audit.
- 01
Free online assessment
27 questions across 9 domains, about 15 minutes. Your maturity profile appears immediately.
- 02
Debrief with an expert
A Synelia consultant reviews your profile with you and identifies the priority gaps.
- 03
Costed roadmap
A sequenced, costed action plan tailored to your sector.
- 04
Implementation and audit
We support you through to the RGSSI audit and, if needed, ISO 27001 certification.
FREE ASSESSMENT
Assess your maturity
in 15 minutes.
An indicative self-assessment, the first step of our “Assessment and gap analysis” offer, which a formal audit then confirms.