Skip to content
GATech

Cybersecurity services

Cybersecurity Services in Morocco: Audit, Pentest, ISO 27001

Beyond training, our consultants work with companies and public bodies in Morocco on the ground: penetration testing, security audits, ISO 27001 compliance, staff awareness and upskilling of SOC teams.

Request a quote

Penetration testing

We simulate a real attacker to measure how exposed your systems are, within a scope agreed with you (perimeter, dates, authorisations), and deliver a prioritised report.

Related training

  • Web applications and APIs
  • Android and iOS mobile apps
  • External and internal networks
  • Active Directory and privilege escalation
  • Technical report, executive summary and debrief

Organisational and technical security audit

We assess your governance, processes and configurations against the frameworks that apply to your organisation in Morocco.

  • Organisational audit: policies, roles, risk management
  • Technical audit: configurations, hardening, architecture review
  • Alignment with DNSSI and law 05-20
  • Bank Al-Maghrib directives for the financial sector
  • Prioritised action plan

ISO 27001 (ISMS) support

We help you design and implement an information security management system, then prepare for the certification audit.

  • Gap analysis against ISO/IEC 27001:2022
  • Risk assessment and treatment
  • Statement of Applicability and ISMS documentation
  • Mock internal audit before certification
  • Readiness for the certification body's audit

Awareness and phishing simulation

Most incidents start with an email. We train your staff in the right reflexes and measure progress with simulated phishing campaigns.

Related training

  • Awareness workshops in French, English or Arabic
  • Supervised simulated phishing campaigns
  • Content tailored to each role and department
  • Tracking metrics from one campaign to the next

SOC and blue team coaching

We coach your analysts on their own tools and use cases to improve incident detection and response.

Related training

  • Review of detection rules and use cases
  • Scenario-based incident response exercises
  • Threat hunting and log analysis methods
  • Upskilling path towards certification

Three training formats

Sessions in French or English, with support in Arabic when needed.

Public classes in Casablanca and Rabat

Classroom sessions in small groups, with an instructor, hands-on labs and practice exams.

Live online virtual classroom

The same programme live with the instructor, from anywhere in Morocco or abroad, remote labs included.

On-site in-house training

A session dedicated to your team, at your premises anywhere in Morocco or Africa, on your dates.

FAQ

Everything to know before you enroll

What is the difference between a penetration test and a security audit?

A penetration test simulates a real attack on a defined scope to prove which weaknesses can be exploited. A security audit is broader: it assesses governance, processes and configurations against a framework such as DNSSI or ISO 27001. The two are complementary.

How does a penetration test work?

First we agree with you on the scope, dates, test type (black, grey or white box) and written authorisations. Our consultants then run the tests and deliver a technical report with vulnerabilities ranked by severity, an executive summary and remediation advice, presented in a debrief meeting.

Do your audits take Moroccan regulations into account?

Yes. Our audits can be aligned with the National Information Systems Security Directive (DNSSI), law 05-20 on cybersecurity and, for the financial sector, Bank Al-Maghrib directives. We also consider law 09-08 where personal data is involved.

Can you support us all the way to ISO 27001 certification?

We support you at every step: gap analysis, risk assessment, ISMS documentation, Statement of Applicability and a mock internal audit. Certification itself is granted by an independent accredited certification body; our role is to get you ready for it.

How much does an audit or pentest engagement cost?

The cost depends on the scope (number of applications, IP addresses or sites), the depth of testing and the length of the engagement. We prepare a detailed quote in dirhams after an initial call to scope your needs.

Ready to earn your certification?

Book a free 15-minute call with an advisor: we assess your level and recommend the fastest path to your goal.