Cyber posture & Zero Trust
Assesses and strengthens the security posture of identities, access, data, devices, Microsoft 365 and cloud environments.
- RFC BRANCH
- Security & Resilience
Reduce cyber exposure
Excessive access rights and inconsistent configurations. Prioritise and deploy security controls.

Starting point
Excessive access rights and inconsistent configurations.

Promise
Prioritise and deploy security controls.

Outcome
Controlled access and verified protections.
Agentic automation programme at scale
A HERO offer to select use cases, set up the architecture and governance, deploy the first agents and then organise the run model.

The necessary foundations
Services to prioritise and deploy security controls.
Cloud security posture with Microsoft Defender for Cloud
Implementation of a CSPM approach with Microsoft Defender for Cloud: resource inventory, posture assessment, recommendations, compliance, alerts and remediation plan.
M365 Security Hardening
Microsoft 365 hardening package: access policies, endpoint security, messaging, collaboration, tenant configuration and initial monitoring.
Zero Trust Baseline
Zero Trust control scoping package: identity, devices, applications, data, network access and remediation priorities.
Accelerators suited to your maturity
Additional capabilities to draw on according to your priorities and maturity.
- See details...Cyber posture & Zero Trust
ISO 27001 Technical Readiness & Remediation Program
Technical support programme for ISO/IEC 27001:2022 compliance readiness: M365 security, firewall HA, segmentation, EoL switches, backups and acceptance testing.
1 / 8

Talk to an RFC expert
Describe your priorities, constraints and projects to prepare a discussion with the relevant teams.

Technology ecosystem
Protection, detection and recovery technologies selected according to risks and the chosen scope.
Security and resilience
Prioritise protections and test their effectiveness.
(Step 01)
Assess the exposure
Identify the assets, usages and risk scenarios to address within the agreed scope.
Deliverable
Risk map and protection objectives.

Organisations supported in their transformation
Find the organisations associated with the engagements presented, along with their industries and individual contexts.

Projects to inform your choices
Explore related engagements to understand the contexts, scopes and challenges covered by RFC.
- Client Reference
2026 - Industry
Microsoft 365 security
SATEM
Microsoft 365 Business Premium security foundation configuration.
Tracked Indicators
Protected accounts • control coverage

1 / 12
Explore the domain's other capabilities
Find complementary offers and areas of expertise to extend your approach according to your organisation's needs.
M365 Zero Trust baseline
M365 Zero Trust baseline should be positioned in Tunisia as a response to the following problem: the security posture is exposed by insufficiently hardened identities, access and M365 environments. The offer targets the following outcome: a prioritised security baseline, remediation and a pragmatic Zero Trust roadmap. In this market, the main emphasis is pragmatism, controlled costs, local delivery and RFC’s local references; the packaging must therefore remain short, concrete and backed by local references.
Cloud security posture & compliance
Cloud security posture & compliance should be positioned in Tunisia as a response to the following problem: cloud security and data compliance are insufficiently visible, managed or auditable. The offer targets the following outcome: a CSPM/compliance starter, prioritised gaps, an operating model and a remediation roadmap. In this market, the main emphasis is pragmatism, controlled costs, local delivery and RFC’s local references; the packaging must therefore remain short, concrete and backed by local references.
Cyber Posture 360
Cyber Posture 360 addresses the following problem: cyber risks are assessed in silos, masking dependencies between cloud, identities, networking, endpoints, data and business continuity. The offer targets the following outcome: a consolidated cyber posture, ranked gaps and a 90-day roadmap connecting risk reduction, compliance and resilience. For Tunisia, the messaging prioritises pragmatism, cost control, local delivery and progressively increasing value.
Talk to an RFC expert
Share your context, priorities and constraints. Our experts help you structure an IT journey aligned with your transformation goals.
Tell us about your challenges
Share your priorities to prepare for a focused discussion.
















