Whatever the size of the organization or the sector of activity, whether it is a private structure or a public body, cybersecurity is necessary to protect the organization from a malicious cyberattack. This protection is as much about People as it is about infrastructure and applications. People: Because viruses and other phishing actions arrive via email and a quick click by the user can be disastrous for the company. Hence the need, beyond the technical barriers put in place in the company to train the user to the cyber gestures that will allow him to adopt the right attitude towards a threat. Infrastructures: They are the gateway to your information system and are necessary for your business. Without it, the company can no longer live. We have seen far too many SMEs disappear in a few months because of a cyber attack on an information system that stopped production lines, the receipt of purchase orders, customer invoicing, orders to suppliers… The applications: They represent the most sensitive and permissive part of your information system. An application flaw is enough for the hacker to destroy your data, to suck it up to resell it, to modify it without your knowledge and to disrupt the normal life of your company. Be sure to test the vulnerability of your applications, especially those in the cloud. Also remember to have a “Security by Design” approach when developing your applications.