Meet us at the Startup area, and at our workshop on Wednesday 7 October, 4:30 pm. Grimaldi Forum, a ten-minute pitch.
Book the workshopOur Assises workshopBY ROLE · EXECUTIVE & BOARD
NIS2 and DORA now name the management body: you approve the measures, you follow the training, you carry the liability. Mindlapse turns the cyber slot into a pack of decisions, accept, fund, defer or transfer, each one click from its evidence.
Accept · Fund · Defer · Transfer · Every figure one click from its evidence
Critical activities within appetite
6 / 8
Decisions pending
3
Findings past their deadline
2
Exposure by business activity
Decisions pending
Online sales · Customer care CIO next quarter
Logistics COO for two quarters
Payments · Online sales General counsel in 45 days
The pack reads exposure by business activity against the appetite the board approved; each decision carries the activities at stake, an owner and a deadline, and every line opens on the records behind it.
THE SITUATION
The cyber slot is a tour of dashboards; it ends when the time runs out, without a decision.
Article 20 of NIS2 and Article 5 of DORA name you; the deck names nothing you could decide.
A compliance percentage on a slide, rebuilt by hand, contested the moment someone asks how it was computed.
Nobody can show whether it was closed, by whom, or on what evidence.
WHAT MINDLAPSE CHANGES
Surface: Cyber Cockpit
Online sales, payments, logistics: each activity read against the appetite you approved, with the indicators that moved since the last slot.
Learn more
Surface: Cyber Cockpit
Each pending decision arrives with the activities at stake, an owner and a deadline; what you decide is written to the record with its rationale.
Learn more
Surface: Board view
The value chain as the board reads it: the functions, the activities inside them, and the exposure of each one where value flows, so the cyber question is a business question.
Learn more
Surface: Organization Map
The group reads one picture, an entity reads its own, and both drill down to the same records, so no consolidation is argued about in the room.
Learn more
Surface: Cyber Cockpit
The measures you approved, the policy you signed, the decisions you took, each dated and attributed: what the management body did, ready to show.
Learn more
YOUR WEEK, YOUR QUARTER
Five moments, two of them with nothing on the agenda, and what the platform had done before the question reached you; then the three dates of the quarter that carry your signature.
Your week
verified: MON 08:00
The posture is within appetite; nothing for you to do.
The daily snapshot said so, activity by activity, before anyone asked.
Surface: Cyber Cockpit
TUE
No cyber item on the agenda.
alert: WED 12:10
A supplier breach in the press.
The answer came from the register, not a phone tree: which activities depend on it, what was assessed, what is still open.
Surface: Value Chain Map
THU
No cyber item on the agenda.
FRI 17:30
The CEO signs a risk acceptance.
In the authority ladder, at the level the residual band required, with an expiry.
Surface: Risk Posture
Your quarter
WEEK 4
The appetite is approved.
With an expiry, and breach alerts wired to the risk owners.
Surface: Risk Posture
WEEK 8
The cyber-risk policy is signed.
Published, versioned, attested by the people it binds.
Surface: Policies
WEEK 12
The pack.
Exposure by activity, indicators against appetite, three decisions, exported from live data.
Surface: Cyber Cockpit
Illustrative week, quiet by design: the moments are fictional, the surfaces are the product’s.
FROM THE FIELD
CYBER COLLECTIVE LAB · Edition 4
The executive reading of cyber: the edition that interviewed a former luxury-sector CISO turned Chief Data & Analytics Officer, on what a board can decide from and what it cannot.
Measured with our design-partner CISOs, figures under continuous validation.
UNDER THE HOOD
FAQ
To approve the cybersecurity risk-management measures, oversee their implementation, follow training and carry the liability for breaches of those duties. NIS2 was due for transposition across the EU by 17 October 2024. As of September 2026 the French transposition law (the projet de loi résilience, which also recasts the OIV regime) is still before Parliament, and the European Commission referred France to the Court of Justice in July 2026.
No. Board-Ready Reporting is the Cyber Cockpit, the transversal layer of the platform; its views light up with the modules you activate. The pack is a reading of your register, not a product beside it.
It is exported from the platform state at the moment you open it, not rebuilt in slides the night before; every figure opens on the records behind it, with their date and their validation state.
Yes. Exposure is read by business function and activity, not in CVEs, and the same figures exist at group, entity and activity altitude, so an executive committee and a board read one picture at the level they own.
Yes. Accept, fund, defer or transfer is written to the record with its rationale, its owner and its deadline, and the resulting actions are tracked in GRCOps to verified closure, so the question you asked last quarter has a status this quarter.
Read it next
The register of information as living data, concentration on the chain, one control set for DORA and NIS2.
Learn more
Contractors graded like the systems they touch, one posture per entity, exceptions tied to the outage window.
Learn more
Every téléservice with a decision file, every obligation on one evidence base, hosted only in Europe.
Learn more
Also by outcome
GLOSSARY
DECISIONS, RECORDED
A twenty-minute session, in your words: exposure, appetite, three decisions.
Our host’s audience measurement (Vercel) uses no cookies and is not covered by this choice. Google Analytics and marketing trackers stay off until you say otherwise. Read the cookie policy