Support tailored to the size and maturity of organizations
5 Key Services
Digital Sovereignty
Structuring and Support for Corporate Sovereignty Certification
Context and Challenges
By 2026, digital, industrial, and economic sovereignty has become a key selection criterion for procurers, investors, and public institutions. Procurement departments, CIOs, and CISOs now incorporate requirements for data control, supply chain resilience, and strategic independence into their tender specifications.
Against this backdrop, the NSI (National Sovereignty Index) certification by ESTRADS Certification has emerged as a foundational framework. It evaluates over 200 criteria across 10 policy areas—governance, geographical footprint, CSR/ESG, security, economic intelligence, sourcing, supplier management, R&D, certifications/labels, and external influence—resulting in a sovereignty index expressed as a percentage, valid for 12 months.
Preparing for this multi-criteria audit on your own is time-consuming and carries risks: you may end up with an incomplete submission, poorly calibrated evidence, or an undervalued score simply because your existing practices were not effectively highlighted. Our support service is specifically designed to secure and optimize this process for your organization.
Objectives of this support Service
Supporting you through the NSI certification process with Estrads Certification:
Conducting an objective initial assessment of your company’s level of sovereignty across the 10 thematic areas of the NSI framework.
Identifying gaps and prioritizing a realistic action plan, aligned with your desired certification timeline.
Structuring and securing the collection of tangible evidence required by the Estrads Certification analysis team.
Assisting with the completion of the online questionnaire and the preparation of the application file for submission to the Certification Board.
Maximizing your sovereignty score and preparing for the commercial leveraging of your certification (including a communications kit and talking points for clients or tender bids).
4 phases execution process
Phase 0 – Initial Pre-assessment
Evaluation of the 10 key elements to define the level of commitment (see point 4)
Phase 1 – Assessment and Scoping
A preliminary evaluation of the company based on the 10 policies of the NSI (National Sovereignty Initiative) framework, including interviews with key functions (executive management, procurement, HR, CSR, security, R&D) and the identification of existing evidence.
Deliverables:
Sovereignty maturity assessment report (covering the 10 thematic areas, with indicative scoring)
Mapping of gaps and non-compliance risks relative to the requirements
Phase 2 — Structuring the Action Plan & Compiling the Documentation and Evidence
Translating the diagnostic findings into an operational action plan: assigning responsibilities by theme, prioritizing initiatives with a high impact on the index, and establishing a timeline aligned with the weekly Certification Council meetings.
Operational support for producing the required supporting documents and attestations, drafting or revising internal policies, and preparing responses for the ESTRADS Certification online questionnaire.
Deliverables:
Detailed action plan by policy area (governance, local footprint, CSR/ESG, security, economic intelligence, procurement/suppliers, R&D, certifications, and external influence)
Roadmap and milestones for audit preparation; a consolidated evidence file, organized by theme and ready for submission to the Analysis Department
Completed responses for the NSI online questionnaire
Templates for additional internal policies (where applicable)
Phase 3 — Final review and support for submission to Estrads Certification
Critical review of the application file prior to submission, simulation of key areas of focus for the Certification Board, final adjustments to secure the target rating, and submission of materials to Estrads Certification (via delegated access to the Estrads "Argos" client platform).
Deliverables:
Finalized and validated application file for submission
Summary report outlining strengths and areas for improvement for the renewal process
Confirmation of file submission
Optional — Phase 4- Ongoing monitoring and annual certification maintenance
As NSI certification is valid for 12 months, maintenance support can be arranged to prepare for annual renewal—including updating evidence, tracking changes to the standards (as proposed by the Scientific Board), and continuously improving the rating. Specific terms can be defined collaboratively as needed.
Typically, clients may opt for a half-day quarterly review with Aegis Partners to update the application file in preparation for the next submission.
Key Success Factors
The success of this disruptive approach relies on a set of key factors expected from the parties involved, starting with a moral commitment to achieving a successful outcome.
Our shared objective is to obtain the highest possible NSI rating in the shortest possible timeframe. To this end, the key success factors are as follows:
Aegis Partners:
1- Commitment to providing the necessary resources and ensuring their availability (ideally via videoconference; any in-person requirements—which would necessitate an adjustment to the initial fee to cover travel—must be specifically justified).
2- Commitment to confidentiality (signing of an NDA).
3- Provision of a detailed schedule prior to commencement, identifying key milestones.
Client:
1- Commitment from senior management to champion this approach throughout the organization.
2- Commitment to ensuring that the appropriate resources are available at the key milestones outlined in the initial project schedule.
3- A streamlined decision-making process at the senior management level to ensure the engagement proceeds according to the expected timeline.
4- Provision of all required documentation prior to commencement to facilitate preparation.
→
→
→
→
Agile Gouvernance - Center of Excellence
Support for the implementation and maturation of your agile governance
Context and Challenges
The performance of the project function has become a key differentiator for any IT department or business unit facing a growing number of transformation initiatives. Organizations that have adopted agile practices at the team level often hit a maturity ceiling when it comes to portfolio management—manifesting as unstable prioritization, inconsistent reporting, rituals that lack decision-making power, and poorly managed interdependencies between teams.
An Agile Center of Excellence (CoE) is designed to professionalize this governance: by defining best practices, providing tools for management, training key stakeholders, and establishing measurable continuous improvement—all without imposing a rigid framework disconnected from the realities on the ground
Common observations among our clients
Lack of a shared governance framework between project teams and the steering committee
“Formal” Agile rituals that are disconnected from budgetary and strategic decision-making
Incomplete or unshared management metrics (velocity, value delivered, risks, dependencies)
Poorly defined key roles (Product Owner, Scrum Master, sponsor) or roles burdened by an excessive number of rituals
Difficulty in balancing priorities at the portfolio level due to the absence of a common language
Objectives of this support Service
We offer a support framework structured around three core pillars, tailored to your current starting point and objectives. Our services are delivered on a "man-day" (MD) basis, ensuring complete flexibility in how resources are allocated according to your immediate priorities.
Pillar 1 — Governance Diagnosis and Scoping
Agile maturity and project governance audit (using our proprietary framework, benchmarked against industry standards)
Mapping of existing steering bodies and operational pain points
Defining or redesigning the governance framework (roles, rituals, and decision-making levels)
Pillar 2 — Tooling and Data-Driven Management
Implementing or optimizing management dashboards (covering portfolios, progress, risks, and value)
Defining a core set of shared metrics (KPIs/OKRs) for both teams and leadership
Assistance with the selection or configuration of tools (e.g., Jira, Azure DevOps, monday.com, etc. — available upon request)
Pillar 3 — Skill Development and Long-Term Sustainability
Training and coaching for Product Owners, Scrum Masters, and transition managers
Facilitating workshops to professionalize key rituals (Sprint Reviews, prioritization committees, portfolio reviews)
Transferring expertise to an internal "liaison" team to ensure the Center of Excellence (CoE) remains sustainable well beyond the scope of our engagement
4 phases execution process
Our approach is structured into four phases, applicable to each service package, with the allocation of effort adjusted based on the total number of contracted days.
Phase 1 — Scoping and Diagnosis (15–20% of the total effort)
-Interviews with key stakeholders (sponsor, CIO/CISO, managers, and teams)
-Maturity audit based on our proprietary framework (covering governance, tooling, culture, and skills)
-Presentation of findings and prioritization of initiatives with the sponsor
Phase 2 — Target State Design (20–25% of the total effort)
-Defining the governance framework and steering bodies
-Designing the core set of metrics and dashboards
Phase 3 — Deployment and Coaching (40–50% of the total effort)
-Operational implementation with pilot teams
-Training workshops and individual coaching for key roles
-Facilitating the initial sessions of the newly established steering rituals
Phase 4 — Knowledge Transfer and Sustainability (10–15% of the total effort)
-Formalizing documentation and reference materials
-Handover to the internal team responsible for ongoing management (for the "Transformation" package)
-Final project review and recommendations for next steps
Key Success Factors
The success of this disruptive approach relies on a set of key factors expected from the parties involved, starting with a moral commitment to achieving a successful outcome.
Our shared objective is to contain scope creep, secure deployments, and increase efficiency. To this end, the key success factors are as follows:
Aegis Partners:
1- Commitment to providing the necessary resources and ensuring their availability (prioritizing videoconferencing; any in-person requirements—which would necessitate an adjustment to the initial budget to cover travel—will be handled as exceptions).
2- Commitment to confidentiality (signing of an NDA protocol).
3- Provision of a detailed schedule prior to kickoff to identify key milestones.
4- Sharing of established best practices.
5- Provision of dedicated tools.
Client:
1- Commitment from senior management to champion this approach across the entire organization.
2- Commitment to ensuring the availability of the appropriate resources at the key milestones outlined in the initial project schedule.
3- A streamlined decision-making process at the senior management level to ensure the engagement proceeds according to the expected timeline.
4- Provision of required documentation prior to kickoff for preparatory purposes.
5- The ability to make rapid decisions regarding organizational adjustments.
Cyber-security
Daily data leaks reports reminds us of the critical and strategic nature of this issue, which must be addressed pragmatically.
Context and Challenges
In France, public and private organizations are facing mounting regulatory and operational pressure regarding cybersecurity—driven by the implementation of the NIS2 directive, requirements from the ANSSI (French National Cybersecurity Agency), stricter specifications in public procurement contracts, and an increasing number of incidents targeting local authorities, operators of essential services, and mid-sized companies (ETIs). In this context, the ISO 27001 standard serves as a foundational framework: it formalizes an Information Security Management System (ISMS) and demonstrates—to regulatory bodies, partners, and clients—that an organization has a firm grasp on digital risk.
However, efforts to achieve ISO 27001 compliance frequently fail when treated merely as a documentation exercise, disconnected from operational priorities. Our approach is based on a simple principle: a security roadmap should be tailored according to two key dimensions—the actual criticality of specific elements (data, processes, assets) and the organization’s current level of maturity—rather than relying on a one-size-fits-all, standardized checklist.
Approche Accompagnement
Aegis Partners offers a highly flexible, "à la carte" approach, reflecting the vast scope of this field. Nevertheless, we frequently encounter the following recurring needs:
1- Structuring an ISO 27001 compliance initiative (whether for full certification or simply aligning with the standard, depending on your specific objectives);
2- Developing a clear map of risks and critical assets, prioritized according to their business impact;
3- Creating a realistic roadmap—sequenced by maturity stages—rather than an unattainable, purely theoretical plan;
4- Benefiting from ongoing, operational support, as opposed to a one-off audit with no follow-up.
Methodology
Our methodology is structured into four phases, designed to produce actionable deliverables at each stage rather than a single final report.
Phase 1 — Maturity Assessment
-Evaluation of current information security maturity based on a framework inspired by ISO 27001 / ISO 27005 and ANSSI standards;
-Interviews with key stakeholders (CIO, CISO, business units, executive management);
-Review of existing documentation (policies, procedures, incident history, architecture).
Phase 2 — Criticality Mapping and Gap Analysis
Identification and classification of critical assets, data, and processes;
Risk analysis (using the EBIOS RM method or an equivalent, depending on the context);
Formal gap analysis against the 93 controls in Annex A (ISO 27001:2022) and applicable NIS2/ANSSI requirements.
Phase 3 — Development of a Prioritized Roadmap
-Prioritization of initiatives based on a matrix of business criticality versus current maturity level;
-Definition of realistic milestones (quick wins, foundational projects, certification targets);
-Indicative estimation of resources, timelines, and dependencies for each initiative.
Phase 4 — Implementation Support
-Operational management of priority initiatives (information security policy, access management, business continuity, awareness training);
-Preparation for certification audits (if ISO 27001 certification is the chosen objective);
-Periodic governance reviews and adjustments to the roadmap based on actual progress.
Key Success Factors
The success of this disruptive approach relies on a set of key factors expected from the parties involved, starting with a moral commitment to achieving a successful outcome.
Our shared objective is to attain ISO 27001 certification and establish a realistic roadmap for managing this multifaceted risk. To this end, the key success factors are as follows:
Aegis Partners:
1- Commitment to providing the necessary resources and ensuring their availability (prioritizing videoconferencing; any in-person requirements would necessitate an adjustment to the initial budget to cover travel).
2- Commitment to confidentiality (signing of an NDA).
3- Provision of a detailed schedule prior to commencement, identifying key milestones.
4- Sharing of established best practices.
5- Provision of dedicated tools.
Client:
1- Commitment from senior management to champion this approach throughout the entire organization.
2- Commitment to ensuring the availability of the appropriate personnel at the key milestones outlined in the initial project schedule.
3- A streamlined decision-making process at the senior management level to ensure the engagement proceeds according to the planned timeline.
4- Provision of required documentation prior to commencement for preparatory purposes.
5- Ability to make rapid decisions regarding organizational adjustments, based on the criticality of the issues at hand.
→
→
Saas Contract Optimization
Optimizing budgets for SaaS/agentic solutions is no longer optional.
Context and Challenges
SaaS (Software-as-a-Service) budgets has become one of the most dynamic—and least controlled—IT cost categories for businesses today. A proliferation of vendors, underutilized licenses, functional overlap between tools, unnegotiated automatic renewals, and a lack of consolidated visibility all lead to significant, recurring excess costs in the vast majority of organizations.
This service is designed to support you in identifying, quantifying, and realizing tangible savings across your SaaS license portfolio—based on a simple principle: part of our compensation is tied directly to the savings actually generated for your company.
Support offered
Map the entire SaaS license portfolio (tools, volumes, costs, contracts, and renewal dates).
Identify potential savings: underutilization, redundant applications, over-provisioned plans, and pricing that is not aligned with market rates.
Negotiate or renegotiate contractual terms and pricing with the relevant software vendors.
Establish a sustainable governance framework for monitoring and optimizing SaaS expenditure (SaaS FinOps).
Secure and document the savings achieved, which serve as the basis for calculating our fees.
Methodology
For a middle size company :
Phase 1 — Audit and Mapping (2 to 3 weeks)
-Comprehensive inventory of active SaaS subscriptions (finance, HR, IT, sales, marketing, etc.).
-Analysis of contracts, actual usage volumes, and unit costs.
-Identification of redundancies, inactive licenses, and price discrepancies relative to the market.
Phase 2 — Quantified Cost-Saving Plan (1 to 2 weeks)
-Delivery of a prioritized action plan, including the estimated annual savings for each initiative.
-Joint validation with your teams regarding the target savings amount and the methodology for measuring them.
Phase 3 — Implementation and Negotiation (4 to 8 weeks)
-Direct renegotiation or support for your teams during discussions with software vendors.
-Right-sizing or termination of unjustified licenses.
-Consolidation of redundant tools, where applicable.
Phase 4 — Measurement, Validation, and Governance (Ongoing)
-Calculation and verification of realized savings on an annualized basis.
-Provision of a tracking dashboard and recommendations for long-term SaaS governance.
Success Fees
Our conviction is simple: we should only be compensated in proportion to the value actually created for your company. Therefore—unless you decide otherwise—our fees are based exclusively on the annual savings generated and jointly validated at the end of the engagement, according to the following sliding scale:
The savings amount is defined as the net annual savings, calculated as the difference between the annual cost of SaaS/Token licenses before our intervention and the annual cost following the implementation of our recommendations. The scope and calculation methodology for this figure are to be jointly validated during Phase 2.
Proposed exemples :
-If the savings generated are €100,000 or more, our fees will amount to 20% of the total savings.
-If the savings generated are between €50,000 and €99,999, our fees will amount to 40% of the total savings.
-If the savings generated are less than €50,000, a flat fee of €10,000 will be charged, regardless of the exact amount of savings achieved.
Fees are calculated on a one-time basis, grounded in the annualized savings validated at the conclusion of Phase 3 (unless an installment-based payment plan is agreed).
This model ensures that our interests are fully aligned with yours: as the savings generated increase, the absolute value of our fees also rises—while remaining strictly proportional to the value created.
→
→
Managed Artificial Intelligence
Support for the implementation and maturation of AI in day-to-day operations, tailored for executive and operational leadership teams
Context and Challenges
In less than two years, artificial intelligence has established itself as a key topic for the executive committee—impacting business functions, organizational structure, IT investments, and the company’s competitive positioning. The challenge is no longer access to information about AI—which is, in fact, overabundant—but rather the executive team’s ability to separate signal from noise, prioritize use cases relevant to their specific sector, and steer a realistic course, all while ensuring the agenda is not dictated by software vendors or media-driven urgency.
This proposal offers a deliberately focused and pragmatic approach: moving beyond one-off awareness seminars that lead nowhere, it establishes a consistent cadence that integrates AI as a recurring, structured item on the executive committee’s long-term agenda.
Mission Objectives
Provide senior management with a clear, up-to-date perspective on the uses, risks, and opportunities of AI as they relate to their specific industry.
Prioritize a select number of high-potential use cases, avoiding the dilution of efforts across non-essential initiatives.
Inform investment and governance decisions—such as "build vs. buy" choices, data sovereignty, and compliance—by offering an external viewpoint, independent of software vendors.
Monitor implementation progress between sessions to ensure that strategic thinking is translated into measurable action.
Methodology
Rhythm and Presence
One half-day in-person session per quarter with the executive committee (or a specific group designated by senior management)—totaling 4 sessions over 12 months.
Between sessions, remote follow-up is provided, including progress updates on initiatives, responses to ad-hoc requests from senior management, and targeted monitoring of priority topics identified during the sessions.
Typical Session Content
-Review of decisions and actions taken since the previous session.
-AI-related updates, filtered and contextualized for the company’s specific sector (no generic industry news).
-In-depth exploration of a specific use case or a key strategic decision (e.g., organizational structure, data, vendors, or skills).
-Recommendations and an action plan for the following quarter.
Key Success Factors
Our shared objective is to understand new AI-related tools in order to increase efficiency. To achieve this, the following key success factors have been identified:
Aegis Partners:
1- Commitment regarding resources and their availability (video conferencing is the preferred format; in-person meetings—which may entail adjustments to the initial budget to cover travel—will only be arranged if specifically required).
2- Commitment to confidentiality (signing of an NDA).
3- Provision of a detailed schedule prior to commencement, identifying key milestones.
4- Sharing of acquired best practices.
5- Provision of dedicated tools.
Client:
1- Commitment from senior management to champion this approach across the entire organization.
2- Commitment to ensure that the appropriate personnel are available at the key milestones outlined in the initial project schedule.