Question 1

How does an engagement work?

Accepted Answer

Every engagement starts with a confidential, no-commitment scoping call. The firm then formalizes objectives, scope and rules of engagement, delivers the work, and hands over actionable deliverables with a findings presentation.

Question 2

Do you work remotely or on site?

Accepted Answer

Most engagements are delivered remotely over encrypted channels. On-site work is possible when the engagement genuinely requires it, for example certain investigations or physical access constraints.

Question 3

Which documents are required before a penetration test?

Accepted Answer

A written authorization from the client, a precise scope definition (targets, time windows, exclusions) and signed rules of engagement. The firm prepares these with you before any technical action.

Question 4

Do you work with institutions and large accounts?

Accepted Answer

Yes. The firm supports public institutions, critical infrastructures and organisations in healthcare, finance, energy and industry, as well as exposed SMEs.

Question 5

Do you work with SMEs?

Accepted Answer

Yes. Short, cost-controlled formats are available: essential diagnostic, prioritized action plan, staff awareness and recurring part-time support.

Question 6

What are your response times?

Accepted Answer

Every request receives an answer within 24 business hours. For a declared incident, handling is immediate via the emergency line.

Question 7

How do you guarantee confidentiality?

Accepted Answer

A non-disclosure agreement is signed before any technical exchange. Communications are encrypted, data is segregated per engagement and artefacts are destroyed at closure. No client reference is disclosed.

Question 8

Which languages do you work in?

Accepted Answer

Engagements, deliverables and presentations are available in French and English.

Question 9

Who delivers the engagements?

Accepted Answer

The firm's founder, DOSSO Béma Adama, is your single point of contact and owns every engagement, from initial scoping to remediation.

Question 10

Are you a certification body or accredited auditor?

Accepted Answer

No. Bema Cyber Security is an independent cyberdefense firm. It supports organisations in their preparation (for example DORA or NIS2) and never presents itself as a certification body, accredited auditor or law firm.

Question 11

How are your fees set?

Accepted Answer

Fees are set as a fixed price after scoping, based on the engagement's scope and duration. The quote details deliverables, milestones and terms before any commitment.

Question 12

What happens during an ongoing incident?

Accepted Answer

Contact the emergency line on the Crisis management page. The priority is containment: preserving evidence, limiting spread, then investigation and recovery support.

FAQ

Services et contact

FAQ

Services et contact

+How does an engagement work?

+Do you work remotely or on site?

+Which documents are required before a penetration test?

+Do you work with institutions and large accounts?

+Do you work with SMEs?

+What are your response times?

+How do you guarantee confidentiality?

+Which languages do you work in?

+Who delivers the engagements?

+Are you a certification body or accredited auditor?

+How are your fees set?

+What happens during an ongoing incident?