Skip to content
AEGRYN

AEGRYN CONSEIL

Risk Management, and Compliance

We map, document and steer your organisation's regulatory and operational exposure, from cyber compliance to risk governance.

Get in touch

Why risk and compliance advisory?

NIS2, DORA, the EU AI Act, the Cyber Resilience Act, the Swiss information security law: regulatory obligations have multiplied in two years, with shorter compliance deadlines and personal liability for executives. Many organisations discover their exposure at the worst possible moment, during an audit, a due diligence process or an incident. We help leaders document their compliance before it is required, and turn a regulatory constraint into a demonstrable advantage with clients, insurers and investors.

Our approach

We do not deliver a theoretical compliance report. We map your actual exposure, document what already exists, and prioritise actions by their regulatory and commercial impact. Every recommendation is actionable, costed and assigned a clear owner.

01

Regulatory mapping

Identification of the texts applicable to your organisation (NIS2, DORA, AI Act, GDPR/FADP, Swiss ISG, Cyber Resilience Act) based on your sector, size and location. Prioritisation by deadline and risk level.

02

Compliance diagnostic

Assessment of the gap between your current practices and regulatory requirements: risk governance, incident management, supply chain security, technical documentation.

03

Remediation plan

Prioritised roadmap with milestones, owners and budget. Clear distinction between what is mandatory, what the market expects, and what remains optional.

04

Documentation & audit readiness

Building compliance evidence usable in due diligence, before a regulator, an insurer or an auditor. Skills transfer to internal teams.

Cyber compliance (NIS2, DORA, Cyber Resilience Act)

AI governance & EU AI Act compliance

Data protection (GDPR, Swiss FADP)

Third-party risk & supply chain management

Business continuity & incident response

Regulatory audit & due diligence readiness

Let's discuss your regulatory exposure

Every engagement starts with an exhaustive diagnostic before any recommendation. We document, we measure, we deliver.

Get in touch