Cyber guardian of the overseas territories
Audit, hardening, outsourced CISO, training and crisis management for businesses, local authorities and associations in French Polynesia and Martinique — with the rigour gained over 23 years at the Ministry of the Armed Forces.
- Cybersecurity consultant and trainer
- Engineer, Network and Security Systems Architect
- 28 years in IT, including 17 in cybersecurity
- Certified ISO/IEC 27001 Lead Auditor & Implementer, ISO/IEC 27005 Risk Manager
- Bpifrance Diag Cybersécurité provider
The overseas territories are not spared, and compliance is no longer optional
Collectivité Territoriale de Martinique (2023), Le Robert (2023), Collectivité Territoriale de Guadeloupe (2022), Mahina in French Polynesia (2024), Conseil départemental de La Réunion (2024): all victims of ransomware. The 2025 reports from ANSSI, the CNIL and Cybermalveillance.gouv.fr confirm the trend.
Our services: securing, operating and monitoring your information system
Consulting and governance
- Outsourced or shared-time CISO
- Drafting and implementation of the ISSP
- ISO/IEC 27005 and EBIOS RM risk analysis
- NIS 2, DORA, LPM compliance, accreditation
Security audit and testing
- Infrastructure audit: firewalls, servers, network, Wi-Fi
- Active Directory and Microsoft 365 audit
- Organisational and compliance audit
- Penetration tests, web vulnerability scans
Information system hardening
- Active Directory (tiering, GPO) and Microsoft 365 hardening
- Immutable, offline backups, tested restores, DRP
- Firewalls, network segmentation, MFA, PKI
- Remediation after an audit or incident
Security monitoring — managed SOC
- Endpoint detection and response on workstations and servers (EDR)
- Log collection and correlation (Wazuh SIEM)
- Vulnerability management, threat watch and 7-day alerting
- Monthly reporting and review with management
Secure managed IT services
- Administration and operational maintenance
- Managed updates, backups and antivirus/EDR
- User support and secure remote maintenance
- Monthly plan, a single contact who knows your IS
"Security by Design" virtualised infrastructure
- Design and deployment of VMware vSphere, Windows Server, Active Directory
- Backup and replication (Veeam, Zerto), built-in DRP
- FortiGate firewalls, PKI, segmentation from the design stage
- Migration and modernisation of existing infrastructure
Training and awareness
- Awareness training for all audiences, on-site or remote
- IT training: AD, Windows Server, vSphere, Veeam
- Simulated phishing campaigns
- Tailored pathways for your teams
Cyber crisis management
- Incident response after a cyberattack
- Forensic analysis and remediation
- Secure rebuild of the information system
- Crisis exercises for your leadership team
- Incident response factsheets and reflex memo (PDF)
1-day flash diagnostic
A diagnostic designed by TAVITA CYBERSECURITY, on-site or remote: we assess your security level across 10 key points (email, accounts, backups, workstations, network, website…) and hand you a prioritised, costed action plan, presented to management. Independent of the Bpifrance Diag Cybersécurité.
When the attack is under way, we respond the same day. Local authorities share their experience.
“Called in as soon as the facts came to light, TAVITA CYBERSECURITY responded very quickly to stop the attack. It secured our network, including our Microsoft 365 tenant, carried out an initial investigation and diagnostic recorded in a report, and worked closely with the national police's cybercrime investigation services.”
Chief Administrative Officer“TAVITA CYBERSECURITY responded very quickly to stop the attack our municipality was facing. It carried out the intervention effectively, securing the network and then implementing the necessary corrective measures, and ran a cybersecurity awareness session for our staff.”
The Mayor“TAVITA CYBERSECURITY brought us its expertise in consulting, auditing, technical support and recommendations, with professionalism, availability and rigour. This support strengthened our infrastructure's security and improved our practices. We recommend TAVITA CYBERSECURITY for its expertise and thoroughness.”
The Mayor
A complete 8-day diagnostic, 50% funded by Bpifrance
The Diag Cybersécurité is a Bpifrance scheme for SMEs and mid-caps. An accredited expert assesses your organisation and systems, carries out technical testing and provides you with a prioritised action plan. TAVITA CYBERSECURITY is an approved provider for the scheme, in French Polynesia, in Martinique and remotely.
The 4 stages of the Diag Cybersécurité
Flash diagnostic or Diag Cybersécurité: which one to choose?
| Flash diagnostic TAVITA CYBERSECURITY | Diag Cybersécurité Bpifrance · France 2030 | |
|---|---|---|
| Who it's for | Micro-businesses, tradespeople, self-employed professionals, small local authorities, associations | SMEs and mid-caps eligible for Bpifrance support |
| Duration | 1 day, on-site or remote | 8 expert-days, spread over 3 to 6 months |
| Content | Overview: email, accounts, backups, workstations, network, website | Full organisational and technical diagnostic, security testing, team awareness training |
| Deliverable | Debrief with the business leader, 10-point prioritised action plan with costings | Diagnostic report, prioritised action plan, crisis management recommendations |
| Price | 700 € excl. VAT, 1-day flat fee, no subsidy | 8 800 € excl. VAT, of which 50% is covered by Bpifrance — remaining cost 4 400 € excl. VAT |
| Start-up time | Within a few days | Once the application is approved by Bpifrance |
| Request a flash diagnostic | Check my eligibility |
Amounts and terms as indicated by Bpifrance at the time of publication; they may change. We support you throughout the application process with Bpifrance.
Three offers, three realities: Micro-businesses, Local authorities, SMEs-Mid-caps-Groups
We refuse any one-size-fits-all approach. After an initial diagnostic, the programme is built in tiers that can be activated one at a time, each quoted individually, with no commitment to the next.
The essentials, right-sized
The few measures that really matter, put in place without tying up the business owner for weeks.
Resilient, compliant and sovereign
From the small municipality to the inter-municipal authority: a proportionate scheme, deployable in stages over several budget years.
Structure, govern, supervise
An SME with 60 staff and a multi-site group don't have the same obligations or the same resources: the set-up follows your exposure.
A hands-on approach, built for the islands
Digital sovereignty, local presence and responsiveness. No 200-page report gathering dust in a drawer: every engagement ends with a prioritised action plan your teams can put to use immediately. David Touche is personally involved in every engagement, on-site and remotely.
Hospitality, local authorities, healthcare, automotive, hosting providers
Paris 2024 — Cybersecurity Flying Squad, Teahupo'o
Security audit of the IT facilities at the Olympic surfing venue in French Polynesia, supporting the Games' cyber team.
"I want to commend the flexibility and professionalism of TAVITA CYBERSECURITY. They provided a concrete solution to a major need, where no other local player had been able to. A reliable and responsive partner."
Moana LI FUNG KUEE — IS Manager, Solari Mobility GroupA local ecosystem serving the digital sovereignty of the French overseas territories
TAVITA CYBERSECURITY works alongside two partners based in the French West Indies, in Martinique and Guadeloupe: each focuses on its core business, you keep a single point of contact, and both your data and cyber skills stay in the territory.
Who are they?
- Company based in Martinique, operating in Martinique, Guadeloupe and French Guiana
- Network and security audits
- Firewall and equipment integration: Palo Alto Networks, Fortinet, Forescout, Aruba, Ubiquiti
- Managed services and incident response
How we complement each other
- KARIGUARD: network engineering, equipment integration, managed operations
- TAVITA CYBERSECURITY: architecture, audit, governance (outsourced CISO), training
- Joint projects in Martinique, from diagnosis to implementation
Who are they?
- Company based in Guadeloupe, serving public and private organisations across the French West Indies and French Guiana
- Consulting, audits and integration of cybersecurity solutions
- Local security operations centre (SOC), data analysed and hosted in the European Union (GDPR)
- Listed by Cybermalveillance.gouv.fr, ExpertCyber label, ISO 27001 Lead Implementer certified, France 2030 laureate (AUTOSOC)
How we complement each other
- KOSEICO: SOC for the French West Indies and Guiana — log collection and centralisation, incident detection and analysis by analysts, remediation and escalation
- TAVITA CYBERSECURITY: design of the set-up, onboarding of your equipment, service management with you (indicators, reviews, governance)
Television, conferences, trade fairs: we speak up out in the field
On the ground, in your time zones
A French Polynesian company founded in Papeete in 2021, now also based in Martinique, and available remotely for mainland France and all the overseas territories.
Need a quote, advice, or immediate help?
Response within 48 business hours for quote requests. If you're under attack right now, call us directly: we'll pick up.