Website publisher
- Publisher
- DIAG.IT · website diagit.fr
- Legal form and registration
- SASU (French simplified joint-stock company with a sole shareholder) · SIRET 838 444 735 00016
- Registered office
- 2, avenue des Jasmins, 78400 Chatou, France
- Contact
- custom-relation@diagit.fr
- Publication director
- Guy Mrejen
Hosting
- Host
- LWS (Ligne Web Services), 10 rue Penthièvre, 75008 Paris, France · lws.fr
Intellectual property
The audit framework, the engagement plan generator and all content on this site (questions, control objectives, test steps, scoring criteria, texts, layout, logo) are original works of Diag. IT, protected by copyright. Any reproduction or distribution, in whole or in part, without written permission is prohibited. The full version of the framework and the generator are used as part of Diag. IT engagements.
This site does not reproduce the text of the standards and frameworks cited. References (numbers of clauses, controls, objectives or articles) are only there to help locate the corresponding requirements in the official texts. Users must obtain these texts from their publishers:
- ISO and ISO/IEC standards (27001, 27002, 27017, 27701, 42001, 22301): ISO and, in France, AFNOR;
- ITIL 4: PeopleCert;
- NIST Cybersecurity Framework 2.0: National Institute of Standards and Technology, a US government publication;
- NIS2, DORA and its technical standards, GDPR, AI Act and CRA: official texts of the European Union published on EUR-Lex.
The short paraphrased extracts from the NIST CSF and EU texts that appear in the control objectives come from freely reusable documents.
Photographs: Charles Deluvio and Declan Sun, on Unsplash, used under the Unsplash licence ; fauxels, on Pexels, used under the Pexels licence. The image on The Method page was generated by artificial intelligence and obtained from Magnific (Freepik) ("side-view-lawyer-working-with-documents"), used under its licence.
Trademarks
ISO is a trademark of the International Organization for Standardization. CISA® is a trademark of ISACA. ITIL® is a trademark of PeopleCert. Other names cited belong to their respective owners.
Diag. IT is not affiliated with any of these organisations, and its tools are not approved, certified or sponsored by them. The names of the organisations cited on the consultant page refer to professional experience and do not constitute an endorsement on their part.
Limitation of liability
The tools on this site are a methodological aid. They do not replace the auditor's professional judgement or the reading of the official texts, and they constitute neither legal advice nor a certification. The references and thresholds proposed should be checked and adapted to the context of each engagement. Diag. IT cannot be held liable for the use made of them.
Personal data and cookies
This site has no user accounts and no audience measurement tool, and it sets no cookies.
Data controller. DIAG.IT, SASU represented by Guy Mrejen, 2, avenue des Jasmins, 78400 Chatou, France, custom-relation@diagit.fr.
Data collected. The "Contact me" form collects your first and last name, your email address, your phone number and, if you provide them, your organisation and a message, as well as your choice regarding the box "I agree that DIAG.IT may contact me again later".
Purposes and legal bases.
- Answering your request (discussing your needs, a presentation, a proposal): pre-contractual measures taken at your request (Article 6(1)(b) GDPR).
- Contacting you later about DIAG.IT services: only if you have ticked the box provided for this purpose, on the basis of your consent (Article 6(1)(a) GDPR). You can withdraw it at any time, without affecting earlier exchanges. Every follow-up message reminds you how to object.
Without this consent, your details are used only to handle your request.
Recipients. The data is sent by email to DIAG.IT only. It is never sold, rented or transferred. The site's host (LWS) acts solely as a technical provider for delivering the message.
Retention period. As long as needed to handle your request. If you have agreed to be contacted again, or if a business relationship begins, no more than three years after your last contact, in line with the recommendations of the CNIL (French data protection authority).
Your rights. You can access your data, have it rectified or erased, restrict its processing, object to it, request its portability, withdraw your consent and set instructions for what happens to it after your death, by writing to custom-relation@diagit.fr. You will receive a reply within one month. You can also lodge a complaint with the CNIL (cnil.fr).
Only the display settings chosen with the "Accessibility" button are stored in the user's browser (local storage). They are never sent to Diag. IT or to any third party.
Fonts are loaded from Google Fonts: in the process, the visitor's IP address is sent to Google. For any question about your data, contact the publisher using the details above.
Accessibility
This site aims for level AA of the WCAG 2.1 guidelines, on which the French accessibility framework (RGAA) is based. It offers:
- an "Accessibility" button at the bottom of every page: text size from 100% to 200%, highly legible font, enhanced contrast, text spacing and reduced animations, with settings stored in your browser;
- full keyboard navigation, with a skip link to the content and a focus indicator visible on every background;
- relative text sizes that follow the font size chosen in your browser, and a layout that reflows without horizontal scrolling;
- support for Windows high contrast mode and for the system "reduce motion" setting;
- contrasting text colours, and information that never relies on colour alone.
The site has not undergone an independent accessibility audit. If you have difficulty accessing any content, write to custom-relation@diagit.fr : an adapted version will be sent to you.
Governing law
This site and its legal notice are governed by French law. This English version is provided for convenience; in case of discrepancy, the French version prevails.
Last updated: November 2026.