Digital forensic expertise · Awareness & training · Cybersecurity
YSAX works with lawyers, judicial officers (commissaires de justice, the French bailiffs), companies, local authorities, non-profit organisations and families on three complementary needs: court-appointed digital forensic expertise, security awareness and training on everyday digital use, and pragmatic cybersecurity, including support and remedial intervention when a cybersecurity incident occurs. Every request is scoped against its context, deadlines, legal framework and the value of travelling on site.
YSAX is Yann Sanchez. A professional listed on the French national platform Cybermalveillance.gouv.fr and a member of CLUSIR Auvergne-Rhône-Alpes; court-appointed digital forensic expert, member of several French associations of court-appointed experts (CEJC, Compagnie des Experts de Justice de Lyon, CNEJITA) and a member of AFSIN, the French-speaking association dedicated to digital investigation.
Membership of these expert associations is personal and constitutes neither a certification nor an accreditation.
Your situation
A case calls for a technical reading: digital devices and media, chronology, access traces, online evidence, a measure under Article 145 of the French Code of Civil Procedure (article 145 CPC) or preparation for an adversarial debate.
See the expertise frameworkAn operation requires IT assistance to identify the relevant data, understand the environment encountered and stay within the scope set by the court order.
Prepare an operationAn incident, a suspected data leak, a dispute with an employee or a supplier, or unusual access: the facts must be established before acting.
Qualify an incidentContent can disappear, an account can change, a device can be altered. The point is to freeze what matters, with method and traceability.
Understand digital evidenceA school, a non-profit organisation, a local authority or a team needs to talk about phishing, social media, cyberbullying or personal data without the jargon.
See the formatsComputers, phones, accounts, logs, backups and applications do not all tell the same story. The scope is defined before the analysis begins.
See the devices coveredThree areas, one common thread
Work on digital facts in a court-appointed, pre-litigation or litigation setting: analysis of devices and media, exploitation of traces, reconstruction of events, formal records of findings and structured reports.
Prevention sessions and structured training that make digital risk concrete: scams, phishing, personal data, cyberbullying, social media, online gaming and digital identity.
Support for organisations on information security governance, risk assessment, audit, compliance, incident response support, remedial intervention following a cybersecurity incident and the practical hardening of information systems.
Grounds for trust
Listed with the Lyon Court of Appeal, with close attention to evidence, traceability, the adversarial principle (both sides heard) and the limits of the scope.
Over 18 years in demanding environments: infrastructure, cybersecurity, information security governance, digital investigation and reporting.
Technical findings are reformulated so that decision-makers, lawyers, investigators, business teams or non-specialist audiences can follow them.
The first conversation serves to scope the need without needlessly exposing sensitive data, with attention paid to any requirement for discretion.
In the field
Coverage
Requests can be considered anywhere in France, whether they concern digital forensic expertise, cybersecurity, security awareness, training or incident response support.
This location makes travel easier to Lyon, the Rhône, the Ain, the Isère, the Saône-et-Loire, the Jura, the Côte-d'Or and neighbouring areas. Requests from anywhere in France can also be considered on a quotation basis, remotely or on site depending on the engagement.
Depending on the framework, the urgency and the constraints of the case, an engagement may combine remote discussions, documentary preparation, on-site work and structured reporting.
Profile
Yann Sanchez has been working for more than 18 years in critical environments: operators of vital importance (OIV, the French critical-infrastructure designation), transport, banking, insurance, energy, local authorities and services. His career combines technical expertise, information security governance, risk management, leadership on sensitive projects and the ability to explain things in plain language.
Listed with the Lyon Court of Appeal (Cour d'appel de Lyon) as an expert in digital matters, notably in the following specialisms:
In a personal capacity, Yann Sanchez is a member of several French associations of court-appointed experts (CEJC, Compagnie des Experts de Justice de Lyon, CNEJITA) and a member of AFSIN — see the full profile.
Independent support for organisations on information security governance, risk management, the protection of digital environments and the clear reporting of technical issues.
Digital investigations, data analysis, reasoned expert reports, work alongside judges, investigators, lawyers, judicial officers and other officers of the court.
Information security governance, risk management, IAM, network segmentation, AD tiering, application security, project leadership, cross-functional coordination and management of a cybersecurity team.
Engagements with i-BP, Certilience, Altran, Exakis, Open and Novances IT: PCI-DSS, SOC/SIEM, firewalls, IDS/IPS, PKI, encryption, strong authentication, audits, DPO duties, pre-sales, management and training.
Full profile: LinkedIn - Yann Sanchez
Go further
How to prepare a pre-trial investigative measure involving IT, preserve digital evidence and assist a judicial officer.
See the Article 145 pageIdentify the devices, accounts, applications, logs and digital traces that may be useful in a case.
See the devices analysedThe court listing, the specialisms, the certifications and the experience behind Yann Sanchez.
See the full profileFirst conversation
Whether for court-appointed forensic expertise, a measure under Article 145, a digital investigation, an awareness session, a cybersecurity engagement or a remedial intervention following a cybersecurity incident, the first conversation serves to establish the context, the urgency, the scope and any confidentiality constraints.
There is no need to send sensitive data at first contact: a short description of the context is enough to scope what comes next.