Our methodology of intervention is based on a several considerations drawn from years of observations:

  • Clearly define the question. Knowing what type of problem you face is essential in trying to solve it, or at least recognizing your limits. we help the decision makers to better structure their problem.
  • Promote intellectual alertness. Routine measures, unverified assumptions and conceptual blindness are major flows leading to insecurity.
  • Forster adaptive culture. Risk management is not a question of establishing standard operating procedures. It is above all fostering a robust culture of structured conversation within the organisation on risk management issues and challenge security arrangements.
  • Go beyond data. Many hostile actions are the result of subjective, illintentioned and malevolent acts. They cannot be reduced to data and statistical tools. You cannot design successful defense mechanism based on patterns and statistics only. Weak signs, internal shortcomings, practitioners insights need to be examined carefully.
  • Security culture and not procedure. Risk management is not only a technical problem but a governance issue. Mapping with governance members corporate responsibilities and liability issues is the first step to build an adaptive and resilient organization through deep changes.
  • Involve governance and decision makers. Developing resilient organisation is not a topdown approach. Cogenerating adapted security solutions with all stakeholders involved by organizing meaningful conversations is of paramount importance.
  • No onesize fitsall solutions. Each organization generates its own vulnerabilities and deserve tailor made solutions.
  • Embracing diversity and team process. Relevant and adequate solutions are developed through interdisciplinary work and with the contribution a large selection of internal and external stakeholders (the wisdom of the crowd) and peer exchanges.
  • Process rather than outcomes to effect change.
  • Find the relevant expertise. The search for adequate solutions is mainly obtained through intersectorial exchanges and networks of expertise.