Inde­pen­dent con­sul­tan­cy spe­cial­is­ing in SME cyber­se­cu­ri­ty • NIS2

Clear decisions for your cybersecurity.

Your clients ask, your insur­er insists, NIS2 sets the stan­dard. From one busi­ness leader to anoth­er, we trans­late these demands into con­crete action.

50+ years of com­bined expe­ri­ence

Man­u­fac­tur­ing • E‑commerce • Finance

Method aligned with the ReCyF (ANSSI)

Paris • Île-de-France • France

The chal­lenge

Cybersecurity is being imposed on you, and you don’t control it.

Hard to know what real­ly applies to you, what is expect­ed of you, where to start and how far to go.

Advice is everywhere. None of it speaks to you, the business leader.

Often too tech­ni­cal, too gener­ic, or writ­ten for IT peo­ple and lawyers.

You are short on time. Cyber risk is not.

Lost con­tract, refused insur­ance, pro­duc­tion at a stand­still : inac­tion can be cost­ly.

LINARIS builds a roadmap with you, sized to your busi­ness, then sup­ports you through imple­men­ta­tion and fol­low-up.

Get­ting start­ed

Take stock, free and with no commitment.

01 · 1 minute

Find your situation

Three typ­i­cal sit­u­a­tions : find the one that match­es your busi­ness.

02 · 45 min­utes, free

Review your situation with a LINARIS specialist

A remote con­ver­sa­tion focused on your busi­ness.

03 · after the review

Receive your written summary

Where you stand and your next steps.

To go fur­ther, ask for our SME Cyber Assess­ment.

Your sit­u­a­tion

NIS2 : mandatory for some, the benchmark for all.

Choose the sit­u­a­tion that match­es yours.

My company is in scope of NIS2

Make NIS2 the foun­da­tion of your cyber­se­cu­ri­ty.

NIS2 makes you account­able as a busi­ness leader. With us, you know what applies to you, where to start, and you keep the evi­dence.

How we help ↻

My com­pa­ny is in scope of NIS2

LINARIS helps you :

  • turn NIS2 into con­crete mea­sures, with­out jar­gon ;
  • mea­sure your gaps against NIS2 require­ments ;
  • assess your cyber risks ;
  • build a detailed roadmap, at your own pace ;
  • imple­ment the nec­es­sary mea­sures and keep evi­dence of them.

← Back

My clients or my insurer require proof of my cybersecurity

Meet your clients’ require­ments with con­fi­dence.

Ques­tion­naires, con­tract claus­es, audits, insur­ance con­di­tions : a com­mit­ment you haven’t weighed up can cost you a con­tract. You con­trol what you declare, and you can prove it.

How we help ↻

My clients or my insur­er require proof of my cyber­se­cu­ri­ty

LINARIS helps you :

  • under­stand what your client or insur­er actu­al­ly expects ;
  • mea­sure your gaps and fix first the weak­ness­es that expose you most ;
  • struc­ture your secu­ri­ty mea­sures and the evi­dence behind them ;
  • answer secu­ri­ty ques­tion­naires con­sis­tent­ly, with sup­port­ing evi­dence.

← Back

I’m not in scope, but I want to get ahead

Out­side NIS2 scope does not mean out­side risk.

No oblig­a­tions today, but the same risks. We adapt the ReCyF, ANSSI’s NIS2 frame­work, to your size and resources.

How we help ↻

I’m not in scope, but I want to get ahead

LINARIS helps you :

  • iden­ti­fy your main cyber risks ;
  • assess your cur­rent lev­el of secu­ri­ty ;
  • build a real­is­tic roadmap, with­in your means ;
  • imple­ment the nec­es­sary actions, with­out buy­ing more than you need.

← Back

What­ev­er your sit­u­a­tion, NIS2 may be the trig­ger. Cyber­se­cu­ri­ty remains the goal.

Our founders

Cyber, risk, governance : excellence for your SME.

Com­ple­men­tary pro­files on every lev­el : infor­ma­tion secu­ri­ty and risk analy­sis, man­u­fac­tur­ing and finance, SMEs and large cor­po­ra­tions.

Portrait of Stéphane Hivert

Stéphane Hivert

Oper­a­tional Cyber Spe­cial­ist

Over more than 25 years, in France and abroad, I have worked exclu­sive­ly in SMEs and start-ups : as a plant man­ag­er, an exec­u­tive, then a con­sul­tant. I prac­tised cyber­se­cu­ri­ty there as a busi­ness leader, to keep oper­a­tions run­ning.

At Laza­da, an e‑commerce start-up since acquired by Aliba­ba, I built ware­hous­es with cyber­se­cu­ri­ty in the plans from day one, because a paral­ysed ware­house deliv­ers to no one. In man­u­fac­tur­ing, I secured every project exposed to dig­i­tal sys­tems, because a stopped pro­duc­tion line is rev­enue that stops com­ing in.

To me, cyber­se­cu­ri­ty is a foun­da­tion for the long term, not a fix. Yet an SME, short of time, resources and guid­ance, fix­es things after the fact. That is the gap I chose to fill.

I start from your oper­a­tional real­i­ty to iden­ti­fy the risks that real­ly mat­ter and help you act, with­in your means.

  • 25+ years in SMEs and start-ups
  • Infor­ma­tion secu­ri­ty
  • Man­u­fac­tur­ing
  • E‑commerce
  • Logis­tics
  • NIS2
Portrait of Lai Ly

Lai Ly

Cyber Gov­er­nance Spe­cial­ist

I spent more than 25 years in inter­na­tion­al finance, one of the most heav­i­ly reg­u­lat­ed sec­tors.

At S&P Glob­al and Amun­di, I led cred­it and ESG risk analy­sis teams.

I have both assessed and prac­tised gov­er­nance, the G in ESG. I can tell what real­ly works from what only exists on paper.

Faced with a new risk, I often had to build the method to analyse it. Cyber risk now pos­es that chal­lenge to SMEs : their clients are already assess­ing their abil­i­ty to respond, yet they rarely have the ded­i­cat­ed teams of large cor­po­ra­tions.

That is where I come in. I make cyber and reg­u­la­to­ry require­ments under­stand­able and work­able, with the rigour of a large cor­po­ra­tion but with­out the over­head.

  • 25+ years in risk analy­sis
  • 14+ years in gov­er­nance
  • Finance
  • NIS2

With us, your cyber­se­cu­ri­ty is in the hands of senior spe­cial­ists.

How we sup­port you

An assessment first. The rest, only if it serves you.

Every com­pa­ny is dif­fer­ent.
So is the sup­port you get.

01

SME Cyber Assessment

Aligned with the ReCyF, the NIS2 frame­work pub­lished by ANSSI, France’s nation­al cyber­se­cu­ri­ty agency, in March 2026.

You know where you stand. You receive :

  • an analy­sis of your cyber risks, across your whole busi­ness ;
  • a mea­sure of your gaps against the ReCyF ;
  • a detailed roadmap to decide on.

Tar­get­ed inter­views and an on-site vis­it, with­out dis­rupt­ing your busi­ness.

02

Implementation

We help you roll out your roadmap, mod­ule by mod­ule :

  • Secure : an action plan pro­por­tion­ate to your busi­ness.
  • Han­dle inci­dents : your teams know how to detect, con­tain and recov­er.
  • Prove : you answer clients, part­ners and author­i­ties, with evi­dence to back it up.
  • Steer : every­one knows their role, and the rules are writ­ten down.

03

Ongoing support

You main­tain your lev­el over time : reg­u­lar progress reviews, and our assis­tance if an inci­dent occurs.

Our fees are fixed,
and agreed with you before any com­mit­ment.

Our insights

NIS2 and SME cyber : the text, the field, without the drama.

Prac­ti­cal guide · in French

NIS2 and SMEs : a practical guide for business leaders

Are you in scope, what must you do, what do you risk : the tex­t’s answers, sit­u­a­tion by sit­u­a­tion.

Lai Ly and Stéphane Hivert · updat­ed Octo­ber 2026

NIS2 and SMEs #1 · in French

Management accountability : what the text actually says

Fines, bans from man­age­ment : what the Direc­tive real­ly requires of you, and what it does not.

Lai Ly · updat­ed Octo­ber 2026

Field sur­vey

Cybersecurity in manufacturing SMEs : 3 blind spots revealed by our survey

25 out of 30 busi­ness lead­ers don’t know what NIS2 con­tains. What we found on the ground, and how to respond.

Stéphane Hivert · 30 SMEs sur­veyed in March 2026

All our insights (in French) →

What sets us apart

Three reasons to work with LINARIS

From one business leader to another

Not cyber the­o­rists. We have faced your con­straints our­selves, as busi­ness lead­ers. Our rec­om­men­da­tions are con­crete and work­able.

No hidden sales agenda

Advice, not a cat­a­logue. Our rec­om­men­da­tions serve your busi­ness, and every­thing is on the table from the first con­ver­sa­tion.

A method aligned with ANSSI

The ReCyF, France’s NIS2 frame­work, not an in-house method. Choic­es you can defend to a client, an audi­tor or an insur­er.

An inde­pen­dent view, the rigour of ANSSI, the expe­ri­ence of busi­ness lead­ers.

FAQ

Frequently asked questions : SME cybersecurity and NIS2

How does the free 45-minute ses­sion work ?

It is a remote con­ver­sa­tion with a LINARIS spe­cial­ist. We go over your busi­ness, your organ­i­sa­tion and your main dig­i­tal depen­den­cies. We also review how pre­pared you are in cyber­se­cu­ri­ty for the require­ments of your clients, your insur­er or NIS2, depend­ing on your sit­u­a­tion.

You receive a writ­ten sum­ma­ry of the con­ver­sa­tion, with an ini­tial esti­mate of your lev­el of readi­ness and your pri­or­i­ties.

It is free and with no com­mit­ment. The SME Cyber Assess­ment is a sep­a­rate engage­ment, which we only offer if it is use­ful to you.

You are not lawyers. How do you help me respond to cyber­se­cu­ri­ty ques­tion­naires or my clien­t’s cyber clause ?

We help you under­stand exact­ly what your clients require in cyber­se­cu­ri­ty, par­tic­u­lar­ly in sup­pli­er secu­ri­ty ques­tion­naires, iden­ti­fy your gaps and pri­or­i­ty actions, then pre­pare con­sis­tent, well-sup­port­ed answers.

To assess the legal impli­ca­tions of a ques­tion­naire answer that binds you, or of a cyber clause, we rec­om­mend con­sult­ing your lawyer.

My com­pa­ny is not sub­ject to NIS2. Why pre­pare for it ?

Because the NIS2 Direc­tive is becom­ing the mar­ket bench­mark for cyber­se­cu­ri­ty. Organ­i­sa­tions sub­ject to it must secure their sup­ply chain and may pass their cyber require­ments on to their sup­pli­ers.

If you sup­ply a client that is sub­ject to NIS2, you may there­fore be indi­rect­ly affect­ed by its require­ments. If not, you are out­side its scope for now. But if you plan to expand into a sec­tor cov­ered by NIS2 or to work with a client sub­ject to the Direc­tive, it is wise to get ahead by align­ing your cyber­se­cu­ri­ty prac­tices with the rel­e­vant require­ments.

What is the dif­fer­ence between my IT ser­vice provider and a cyber­se­cu­ri­ty con­sul­tan­cy ?

We bring a spe­cialised, inde­pen­dent per­spec­tive on SME cyber­se­cu­ri­ty, com­ple­ment­ing that of your IT ser­vice provider or IT depart­ment.

They look after the day-to-day per­for­mance, avail­abil­i­ty and main­te­nance of your infor­ma­tion sys­tems. We assess cyber risks across your whole busi­ness and help you define the right mea­sures and steer their imple­men­ta­tion.

We help you steer the pro­tec­tion of your busi­ness and coor­di­nate all the teams involved, not just IT.

Both areas of exper­tise are essen­tial, com­ple­men­tary and inde­pen­dent of each oth­er.

Can I han­dle NIS2 com­pli­ance on my own, with soft­ware ?

Soft­ware helps doc­u­ment and track the large amount of com­plex infor­ma­tion a NIS2 com­pli­ance project involves, and we use such tools our­selves. But NIS2 com­pli­ance is not just about fill­ing in a ques­tion­naire. You have to decide on pri­or­i­ties, get your teams on board and imple­ment the nec­es­sary mea­sures.

Soft­ware can also encour­age self-assess­ment, with the risk of lack­ing per­spec­tive and over- or under-invest­ing in cyber­se­cu­ri­ty.

LINARIS sup­ports your NIS2 project by pro­vid­ing that out­side per­spec­tive, to rank pri­or­i­ties, inform deci­sions and coor­di­nate actions.

Do I need tech­ni­cal knowl­edge to work with you ?

No. Our cyber­se­cu­ri­ty sup­port engage­ments are designed for SME lead­ers, and we speak in man­age­ment terms, not tech­ni­cal ones. Some steps may call for occa­sion­al tech­ni­cal dis­cus­sions with your IT man­ag­er or IT ser­vice provider.

We speak sev­er­al lan­guages : those of senior man­age­ment, tech­ni­cal cyber­se­cu­ri­ty and organ­i­sa­tion. We bridge these worlds so that every­one under­stands what is at stake and can con­tribute.

We help man­age­ment struc­ture and coor­di­nate the project, with­out tak­ing over its lead­er­ship role.

Will a cyber­se­cu­ri­ty assess­ment dis­rupt my busi­ness ?

No. Our approach relies main­ly on tar­get­ed inter­views, an on-site vis­it and a review of your exist­ing prac­tices. It is designed to fit entire­ly around your oper­a­tions.

How much does a cyber­se­cu­ri­ty assess­ment cost for an SME ?

The price of a cyber­se­cu­ri­ty assess­ment (or audit) depends on the size of your com­pa­ny, the com­plex­i­ty of your activ­i­ties and of your infor­ma­tion sys­tem, and how urgent your needs are. You receive a clear quote before any work begins, with no hid­den costs.

Contact

Book your free 45-minute situation review

Open the cal­en­dar

Cal­en­dar not show­ing ? Call +33 9 85 00 19 31.

Anything else ?

Send us a mes­sage

Or call us, we reply with­in one busi­ness day : +33 9 85 00 19 31

Cyber inci­dent : +33 6 56 68 17 11

We call you back with­in one busi­ness day, then step in as quick­ly as pos­si­ble in the Paris region : analy­sis, con­tain­ment, recov­ery.
Attack in progress ? First steps on 17Cyber.gouv.fr, the French gov­ern­men­t’s cyber emer­gency ser­vice (in French).

LINARIS · SME cyber­se­cu­ri­ty con­sul­tan­cy · Based in Ver­sailles · Serv­ing Paris, the Île-de-France region and all of France · On-site and remote.