Tiphael Flak

I am a freelance cybersecurity & GRC consultant, specializing in supporting VSEs/SMEs, ETIs, and IT/SaaS players who need to structure their security in a concrete and immediately actionable way.

My role: clarify your risks, your rules, and your priorities so that cybersecurity becomes a managed subject, presentable to your management and your clients (audits, questionnaires, ISO 27001, NIS2, GDPR...).

Cybersecurity diagnosis and risk analysis: inventory, risk mapping, prioritized 90-day action plan + 12-month outlook.

Governance and documentation: PSSI, charters, policies, registers... short, readable documents, aligned with your actual practices.

ISO 27001 / NIS2 Compliance: gap analysis, realistic roadmap, risk treatment plan, materials for management and clients, support for compliance with applicable standards.

Cybersecurity awareness program: definition of a 6-12 month awareness plan and launch session to engage your teams.

Operational deliverables from day one: action plans, risk matrices, management summaries, and reusable templates for your teams.

Very pragmatic approach: few meetings, I work autonomously and you receive clear results, ready to be used in committees, audits, or with your clients.

Dual technical + GRC culture: I understand your IT constraints and I speak the language of management.

Field experience + Cybersecurity Master's degree, certified ISO 27001 Lead Auditor and EBIOS RM.

📍 Based in France, I work 100% remotely for short and targeted missions, with a simple objective:

to give you a clear vision of your security level and an immediately actionable action plan.