Cybersecurity

Anticipating cyber risk, structuring your compliance and responding effectively to security incidents.

Our approach

Information security is no longer just a technical matter. Law 05-20 on cybersecurity and Law 09-08 on personal data protection impose specific obligations on businesses, and failing to meet them engages their liability.

We work on both phases of cyber risk: preparation, through compliance and contracts with service providers, and crisis, through legal support for incident response and any resulting litigation.

What we do

Compliance audits against applicable cybersecurity obligations
Security policy, governance and documentation of measures
Service-provider contracts: hosting, managed services and cloud
Compliance with Law 09-08 and filings with the CNDP
Legal handling of incidents, notifications and communication
Resulting litigation: liability, insurance and claims

Frequently asked questions

We have just been attacked: what are our obligations?

Depending on the nature of the incident and the data affected, notification obligations may apply within short deadlines. We assess the incident, determine which notifications are required, secure the evidence and assist you in dealings with the authorities.

Are we liable for a breach at our service provider?

Often partly, yes: using a provider does not automatically transfer liability. We audit your contracts, strengthen the security, audit and reversibility clauses, and organise how responsibilities are shared.

Where should a compliance project start?

With a mapping exercise: which systems, which data, which providers, which flows. This initial picture lets you prioritise actions and tackle the truly urgent workstreams rather than everything at once.

CASABLANCA FINANCE CITY

Need help in this area?

Let's discuss your situation, at our office, by phone or by video call.