K-Comply
Security evidence your insurer understands
K-Comply turns the real state of your fleet into readable monthly reports, linked to recognised frameworks. Manual controls are documented with their evidence.
The problem
Cyber insurers, clients and auditors ask for evidence. Gathering it by hand takes days and goes stale as soon as it is produced.
What the module does
Recognised frameworks
ANSSI IT hygiene guide and CIS Controls v8.1 (IG1) from the first version; NIS2 Article 21 measures and ISO 27001 afterwards.
Automatic controls
Each active module ticks the controls it actually verifies: encryption, patches, administrator accounts, filtering.
Manual evidence
Organisational measures are documented with their dated supporting documents.
Monthly report
A PDF generated automatically every month, in French (other languages planned), exportable for your insurer or auditor.
How it works
Findings
The modules report the real state of the fleet.
Mapping
Each finding is linked to the measures of the frameworks.
Report
The monthly report lists what is covered, what remains to be done and why.
What you should know
- The first version (ANSSI hygiene and CIS IG1, monthly PDF report) is in the pilot programme.
- Kayzen contributes to NIS2 or ISO 27001 measures: compliance depends on the whole organisation, not on one piece of software.
- The mappings to the frameworks should be reviewed by a compliance consultant.
Frequently asked questions
Questions about this module
Is the report enough to meet the NIS2 requirements?
No. It documents the technical measures covered by Kayzen and helps prepare for an audit; compliance is the responsibility of the whole organisation.
Will my insurer accept this report?
Each insurer has its own requirements. The report is designed to answer the most common questions, but we cannot guarantee its acceptance.
Practical cybersecurity guides
- Good habitsManaging updates without spending all day on itSystem, browser, software, internet box: why updates matter, what to update first and how to organise patching in a very small business.Read the guide
- RegulationNIS2: who is affected and where to start?Directive (UE) 2022/2555: sectors, size, essential and important entities, article 21 measures, incident reporting. Key points, with ANSSI references.Read the guide
- In the workplaceBackups: the 3-2-1 rule explainedThree copies, two media, one off-site and offline: applying the 3-2-1 rule, testing restoration and protecting backups against ransomware.Read the guide
Want to try this module?
The pilot programme gives you access to modules as they are delivered, free of charge and with no commitment.