Certifications & training
ISO/IEC 27001 Lead Auditor, EBIOS RM, DPO AFNOR, Fortinet NSE4, CCSA, ITILv3, VCP5-DCV.
About
YSAX is led by Yann Sanchez, a court-appointed digital forensic expert listed with the Lyon Court of Appeal (Cour d'appel de Lyon) and an independent cybersecurity consultant. His approach combines technical experience, governance, risk assessment and clear reporting for both technical and non-technical readers.
Court-appointed expert
Listed with the Lyon Court of Appeal as a digital expert, in particular in the following specialities:
In a personal capacity, Yann Sanchez is a member of the following companies of court experts: the Compagnie des Experts de Justice de Lyon, the Compagnie des experts de justice en criminalistique (CEJC, the French forensic-science experts' association, admitted as a full member on 1 September 2026) and the Compagnie Nationale des Experts de Justice en Informatique et Techniques Associées (CNEJITA, the French national association of court-appointed IT experts, admitted on 2 September 2026). He is also a member of AFSIN (Association Francophone des Spécialistes de l'Investigation Numérique, the French-speaking association of digital investigation specialists).
Yann Sanchez is also a member of CLUSIR Auvergne-Rhône-Alpes (a regional information security network). These memberships are personal and do not constitute a certification or a label.
Experience
Independent support for organisations on information security governance, risk management, securing digital environments and clear reporting on technical issues.
Digital investigations, data analysis, production of reasoned reports, and collaboration with judges, investigators, lawyers, judicial officers (commissaires de justice, the French bailiffs) and other officers of the court.
Engagements covering governance, audits, risk assessments, security architecture, cyber support and the management of action plans.
Experience across OIV (operator of vital importance, a French critical-infrastructure designation) environments, transport, banking, insurance, energy, local authorities and service-sector organisations, with hands-on exposure to technical and operational constraints.
Skills
ISO/IEC 27001 Lead Auditor, EBIOS RM, DPO AFNOR, Fortinet NSE4, CCSA, ITILv3, VCP5-DCV.
GNU/Linux, networking, authentication, encryption, certificates, logs, vulnerabilities and architecture.
Plain-language explanation, writing, summarising, teaching and facilitating cross-functional initiatives.
Anonymised references
Engagements in judicial, investigative and civil litigation settings, with a constant requirement for technical rigour, traceability and adaptation to the framework of each case.
Prevention engagements, training, information security support and incident response support, with one common thread: making risks and findings understandable to support decision-making.