Context
In response to increasing cyber threats and the need to strengthen its security posture, an international player in the infrastructure and energy sector launched several initiatives to enhance cybersecurity governance and vulnerability management across its critical IT environments. To support this transformation, Avaliance worked alongside the CISO in a transversal role, covering vulnerability tracking, security audit coordination, incident management, and performance monitoring of cybersecurity KPIs.
Challenges
The client needed to improve its ability to detect and remediate cyber threats while embedding security more effectively into IT projects.
Key challenges included reducing critical vulnerabilities, improving responsiveness to security incidents, strengthening the reliability of cybersecurity KPIs, and establishing a robust governance framework around CISO activities.

Achievements
-
management and monitoring of vulnerabilities across critical systems and applications
-
integration of cybersecurity requirements into IT projects and patch management supervision
-
coordination and execution of technical security audits, risk analysis, and recommendations
-
enhancement and tracking of cybersecurity KPIs and performance metrics
-
management and coordination of security incidents and associated remediation actions
Core Focus Areas
Results
Context
In response to increasing cyber threats and the need to strengthen its security posture, an international player in the infrastructure and energy sector launched several initiatives to enhance cybersecurity governance and vulnerability management across its critical IT environments. To support this transformation, Avaliance worked alongside the CISO in a transversal role, covering vulnerability tracking, security audit coordination, incident management, and performance monitoring of cybersecurity KPIs.
Challenges
The client needed to improve its ability to detect and remediate cyber threats while embedding security more effectively into IT projects.
Key challenges included reducing critical vulnerabilities, improving responsiveness to security incidents, strengthening the reliability of cybersecurity KPIs, and establishing a robust governance framework around CISO activities.

Achievements
-
management and monitoring of vulnerabilities across critical systems and applications
-
integration of cybersecurity requirements into IT projects and patch management supervision
-
coordination and execution of technical security audits, risk analysis, and recommendations
-
enhancement and tracking of cybersecurity KPIs and performance metrics
-
management and coordination of security incidents and associated remediation actions
Core Focus Areas
Results
Context
In a banking environment subject to strong risk management and regulatory compliance requirements, collateral calculation processes play a key role in controlling financial exposure. In this context, a leading investment bank launched a program to modernize its collateral calculation tools to improve the reliability of existing processes and reduce technical debt associated with legacy workflows. The initiative notably aimed to migrate processes developed in SSIS (SQL Server Integration Services) to a more modern application architecture based on .NET, improving performance, maintainability, and overall consistency of the calculation chain.
Challenges
The client needed to modernize its collateral calculation models while ensuring the reliability of processes used in risk management.
Key challenges included removing technical debt associated with legacy SSIS workflows, harmonizing calculation mechanisms, and improving overall processing performance. It was also necessary to enhance tool maintainability and ensure the robustness of processes within a demanding financial environment.

Achievements
-
redesign and implementation of new collateral calculation models
-
progressive migration of legacy SSIS processes to a .NET-based application architecture
-
drafting of technical specifications and execution of technical and functional tests
-
contribution to Level 2 application support to ensure operational continuity
Technologies & Domains
Results
Context
In a context of increasing digitalization and high sensitivity of processed data (health, insurance, pensions, savings), a leading social protection group launched an initiative to strengthen its organizational resilience against operational risks. Operating nationwide with multiple regional entities, the group must ensure robust service continuity for hundreds of thousands of beneficiaries. Faced with growing risks such as cyberattacks and technical outages, Executive Management mandated Avaliance to conduct a comprehensive audit of the Business Continuity Plan (BCP).
Challenges
The client needed to assess the maturity of its business continuity framework and ensure its ability to respond effectively to crisis situations.
Key challenges included ensuring alignment between business continuity plans and IT infrastructures, identifying gaps between existing measures and actual risks, and defining a clear improvement roadmap to strengthen overall organizational resilience.

Achievements
-
scoping of the mission and identification of key business, IT, and security stakeholders
-
in-depth analysis of continuity policies (BCP) and IT/telecom continuity plans (ITCP)
-
evaluation of BCP governance, crisis management mechanisms, and feedback processes
-
analysis of alignment between business priorities, risk scenarios, and deployed measures
-
development of a BCP maturity assessment and validation of a prioritized improvement roadmap
Focus Areas
Results
Context
As part of its IT transformation and in response to increasing regulatory requirements related to cybersecurity and operational resilience, a leading insurance company launched several initiatives to strengthen its IT risk governance. This effort is driven in particular by the upcoming enforcement of the European DORA (Digital Operational Resilience Act) regulation, requiring financial institutions to enhance their management of technology and cybersecurity risks. To support this transition, the client relied on Avaliance to structure risk monitoring, manage remediation plans, and progressively align internal processes with regulatory requirements and security standards.
Challenges
The client needed to improve control over IT risks and strengthen cybersecurity governance to reduce operational risk and ensure regulatory compliance.
Key challenges included maintaining and managing the risk register, ensuring effective implementation of remediation plans, aligning progressively with DORA requirements, and engaging business teams in a sustainable approach to security and operational resilience.

Achievements
-
maintenance and management of the risk register and tracking remediation plans
-
formalization of internal security processes and compliance alignment for process owners
-
preparation of annual security testing and internal control campaigns (process and evidence collection)
-
monitoring of remediation plans resulting from control campaigns and security audits
-
support in implementing and aligning with DORA regulatory requirements
Core Focus Areas
Results
Context
As part of its IT transformation and business process digitalization, the client launched several initiatives to modernize internal services and automate operations related to insurance contract management. These initiatives rely on two key applications: C-Services, a REST API platform designed to dematerialize commercial offerings and management operations, and C-URSA, a web application used by operators to manage financial, commercial, and post-sales activities. To support these projects and ensure the secure delivery of critical features, the client relied on Avaliance to design, develop, and integrate both front-end and back-end components within an Agile Scrum environment.
Challenges
The client needed to accelerate the digitalization of its business operations while ensuring the reliability of financial workflows and the quality of applications delivered to operational teams.
Key challenges included automating management processes (subscription, redemption, payments, arbitrage), improving document management, enhancing user experience, and strengthening software quality through rigorous unit and integration testing.

Achievements
-
design and development of C-Services REST APIs for core operations (subscription, redemption, payments, arbitrage)
-
development of web services for CRM, document management, and implementation of unit/integration testing
-
design of C-URSA application features, including authentication modules, user interfaces, and dashboards
-
implementation of end-to-end financial workflows (consultation, tracking, control, validation)
-
development of a document management module and participation in Agile Scrum ceremonies
Technologies & Frameworks
Results
Context
The client launched an initiative to strengthen the quality, reliability, and industrialization of its application development processes. This program relies on a continuous integration platform and shared technical foundations used across all group applications. To structure these technical foundations, enhance development tools, and ensure consistency of practices across internal teams and international service centers, the client relied on Avaliance to define technical standards, evolve the CI platform, and support teams in their adoption.
Challenges
The client needed to improve the reliability of its continuous integration platform while harmonizing the technical foundations used across applications.
Key challenges included enhancing code quality, improving application performance, introducing new technologies, standardizing frameworks, and aligning development practices between internal teams and international maintenance teams.

Achievements
-
administration and evolution of the CI platform based on GitLab, Jenkins, Nexus, and Sonar
-
design and maintenance of shared application foundations for Java Web, Java Batch, and Angular
-
development of cross-functional frameworks and Maven plugins to standardize development practices
-
facilitation of code audits, application performance optimization, and technical proofs of concept
-
technical support and training on Java, Spring Boot, and Git for internal and international teams
Technologies & Tools
Results
Context
The client launched a strategic initiative to modernize its software engineering practices, industrialize deployments, and harmonize its application technology stack. This cross-functional program covered software architecture, technical governance, DevOps adoption, Cloud industrialization, and the implementation of microservices architectures. To drive this transformation and ensure overall technical consistency, the client relied on Avaliance to define standards, coordinate teams, and support the evolution of development practices.
Challenges
The client needed to transform its development and deployment practices to improve reliability, accelerate delivery cycles, and enhance software quality.
Key challenges included harmonizing technical foundations, securing application architectures, adopting modern tooling, industrializing Cloud deployments, transitioning to Git-based workflows, and defining shared patterns across applications and frameworks.

Achievements
-
structuring and leading a cross-functional team of technical experts and establishing architecture governance
-
supporting DevOps adoption, leading change management, and industrializing Cloud deployments
-
designing microservices architectures and evolving CI/CD platforms (GitLab, Jenkins, Nexus, Sonar)
-
defining shared application foundations and cross-functional frameworks (Java, Batch, Angular)
-
providing technical support to internal development teams and international service centers
Technologies & Ecosystem
Results
Context
The client launched several application initiatives requiring a robust, scalable software architecture aligned with group technology standards. These projects involved high technical expectations, close collaboration between development teams, and precise delivery management within an Agile environment. To secure technical decisions and ensure overall consistency of the solutions, the client relied on Avaliance to structure the application architecture, guide technical teams, and ensure reliable delivery.
Challenges
The client needed to design application architectures capable of supporting increasing workloads while ensuring code quality and maintainability.
Key challenges included defining technical standards, supporting development teams, streamlining delivery cycles, managing technical risks, and establishing sustainable software engineering practices across the project scope.

Achievements
-
design of application technical architecture and definition of technology choices and frameworks
-
technical guidance of teams and resolution of complex issues during implementation
-
contribution to both front-end and back-end development to secure critical features
-
structuring development practices to improve long-term software quality
-
facilitation of Agile rituals including planning, grooming, demos, and sprint follow-up
Technologies & Agility
Results
Context
The client launched several strategic application projects aimed at modernizing internal tools and improving the performance of business processes. These initiatives included redesigning user interfaces to enhance internal user experience, as well as evolving backend components to optimize inter-application exchanges and processing reliability. To support these projects and secure delivery within a demanding environment, the client relied on Avaliance to design, develop, and integrate both front-end and back-end application components.
Challenges
The client needed to accelerate the modernization of its internal applications while ensuring strong technical consistency between front-end and back-end layers.
Key challenges included ensuring the quality and reliability of Angular components, the robustness of Java-based services, seamless integration with existing systems, adherence to delivery timelines, and securing deployments within a regulated environment.

Achievements
-
design and development of Angular front-end components integrated into existing interfaces
-
development of Java-based REST web services for inter-application communication
-
implementation of Spring batch processes for backend operations and processing reliability
-
simultaneous evolution of front-end and back-end layers to ensure application consistency
-
optimization of code quality and technical coordination to secure the integration of new features