Apssis

What Apssis does

APSSIS (Association Pour la Sécurité des Systèmes d'Information de Santé) is a French non-profit association (loi 1901) founded in August 2010 and headquartered in Duneau, Sarthe, France. It is the only French association exclusively dedicated to cybersecurity for health information systems and health data, federating hospitals, healthcare IT security officers (RSSI, DPO), regional health agencies (ARS, GRADeS), and over 40 technology vendors. The organization operates four product pillars: (1) the annual CNSSIS national congress, a three-day event drawing 250+ professionals with 24 hours of conferences; (2) regional Rencontres SSI Santé networking events plus a cybersecurity track at the Santexpo trade show; (3) professional training programs including RSSI Santé certification covering NIS 2 directive and EBIOS RM methodology, plus on-site cybersecurity awareness sessions tailored to healthcare staff; and (4) a publication library including the eight-part Cyber-résilience Guide series authored by VP Cédric Cartau, an Ouvrage Collectif, and exclusive studies. All training delivery is QUALIOPI-certified and DATADOCK-registered, enabling French professional training fund eligibility.

APSSIS generates revenue through three streams: annual membership fees at €450 HT per member yielding subscription-style recurring revenue from 200+ members, congress and event registration fees (€1,500 HT for members, €1,900 HT for non-members), and professional training services delivered on-site or remotely. Industry partner sponsorship from over 40 congress contributors (Palo Alto Networks, Orange Cyberdefense, Fortinet, SailPoint, Imprivata, Stormshield, etc.) is a meaningful supplemental revenue mechanism. The GTM motion is event-driven, with the CNSSIS congress, Rencontres SSI Santé, and Santexpo track serving as the primary demand-generation and revenue-capture moments, complemented by digital channels (website, newsletter, LinkedIn) and earned media in national press (Le Monde, France Info, France Inter) and specialized outlets (DSIH Magazine, InCyber). The association is governed by a Board of Directors under President-Founder Vincent Trely with a small professional staff (5-10 mission officers and chargée de missions) and operates exclusively in France, with no disclosed external investment, parent company, or VC involvement.

The association is governed by President-Founder Vincent Trely, supported by Deputy Director Hélène Daspe, Secretary General Auriane Lemesle, Treasurer Laurent Caminati, and a multi-stakeholder board of seven Vice-Presidents drawn from CHU Nantes, Hospices Civiles de Lyon, LNA Santé, CH Henri Laborit, DSIH Magazine, the Paris Bar, and I-Tracing. This structure embeds deep practitioner leadership into the association's strategic direction and reinforces its legitimacy as a practitioner-led community body.

Name

Apssis

Legal name

Association Pour la Sécurité des Systèmes d'Information de Santé

Website

https://apssis.com

Company type

Private

Founded year

2010

Operating status

Operating

Headcount range

11–50 employees

Short description

APSSIS is a French non-profit association founded in 2010 that serves as the exclusive national platform for healthcare IT cybersecurity, federating hospitals, RSSI professionals, and 40+ technology vendors through training, annual congresses, and publications.

Ownership category

akta.pro rank

Headquarters

HQ city

Duneau

HQ country

France

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Others

Revenue model

1. Membership fees: Annual membership fees provide core revenue. Members receive access to exclusive content, discounts on training and congress attendance, invitations to events, and publications.
2. Congress and event registration fees: Revenue from the annual CNSSIS congress and Rencontres SSI Santé events. Members receive €400 discount on congress pricing.
3. Professional training services: SSI training programs for healthcare professionals including RSSI Santé certification courses. Members receive discounts on training.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels10 records

Core offering

Apssis is a French non-profit association that organizes the annual CNSSIS national congress, the Rencontres SSI Santé regional networking events, the RSSI Santé training program (covering NIS 2 and the EBIOS RM methodology), and on-site cybersecurity awareness sessions for healthcare staff. It also publishes the Cyber-résilience Guide series, collective works, and exclusive studies, and provides a members-only digital platform with 50+ video conferences, webinars, and publications.

Product overview

APSSIS (Association Pour la Sécurité des Systèmes d'Information de Santé) is a non-profit association dedicated to cybersecurity for health information systems in France. Rather than a unified software platform, the organization operates as a knowledge and training hub comprising four main pillars: (1) the annual CNSSIS Congress - a national 3-day conference with 24 hours of content and ~250 professionals; (2) Rencontres SSI Santé - regional networking events; (3) Training programs including RSSI Santé training with EBIOS RM methodology and customized cybersecurity awareness sessions; and (4) Publications including the Guide Cyber-résilience series (Opus 1-8), collective works, and studies. The association also facilitates sensitization sessions, coordinates with institutional partners, and provides a library of 50+ video conferences for members.

Differentiator

Problem solved

Functional benefit

Products and services

• CNSSIS - Congrès National de la Sécurité des Systèmes d'Information de Santé Annual 3-day national congress dedicated to cybersecurity of health information systems, featuring 24 hours of conferences, round tables, and debates with approximately 250 attendees including DG, DSIO, DSI, RSSI, RSI, institutional representatives, and cybersecurity experts.
• Rencontres SSI Santé Regional networking events bringing together RSSI (Information Systems Security Officers) and cybersecurity professionals in healthcare for conferences and professional exchanges, typically gathering 100+ guests per edition.
• Parcours SSI Santé (Santexpo SSI Health Track) Cybersecurity track organized at SANTEXPO trade show, providing a circuit of expert presentations on health IT security topics for attending healthcare professionals and industry vendors.
• Formation RSSI Santé Comprehensive certified training programs for healthcare IT security professionals covering SSI context, regulatory framework (NIS 2 directive), and the EBIOS RM risk analysis method. Programs are interactive with practical workshops, collaborative sessions, and EBIOS RM serious games. Available in in-person and distance learning formats.
• Journées de Sensibilisation à la Cybersécurité Customized on-site cybersecurity awareness sessions delivered at healthcare establishments across France, tailored to different audiences including administrative staff, medical personnel, nursing staff, and management. Each session uses specific pedagogical sequences adapted to the audience.
• Guides Cyber-résilience (Series) Series of practical guides on cybersecurity resilience authored by Cédric Cartau (RSSI/DPO CHU Nantes), covering passwords, cyberattacks, access habilitations, cloud security, indicators, governance, crisis management, and ISO 27001 for healthcare IT environments.
• Ouvrage Collectif SSI Santé First collective work dedicated to health information system security, produced by Apssis with support from ASIP Santé, featuring over 40 testimonies and articles from healthcare cybersecurity professionals.
• Etude Femmes, Numérique et Cyber Exclusive study by Anna Pujol-Mazzini providing an assessment of women's place in the digital ecosystem, featuring contributions from engaged professionals in the healthcare cybersecurity sector.
• VADE-MECUM des Objets Connectés de Santé Guide on connected health objects, providing security guidance and best practices for IoT devices in healthcare settings.
• Webinaires et Vidéoconférences Exclusive webinars and video conferences for members covering technological and legal topics in health cybersecurity, with over 70 video conferences available in the library.

Quantifiable outcome

• 9.29/10 average satisfaction score from 173 trained professionals (2020-2025)
• +2 more outcomes

Named customers9 records

Segments3 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Partnerships

47 partnerships are on record, tiered core.

• Palo Alto NetworkscoreGTM or Marketing PartnerTechnology partner and conference sponsor for CNSSIS congress. Provides specialized cybersecurity conferences and supports healthcare cybersecurity initiatives through the APSSIS ecosystem.
• Softway MedicalcoreGTM or Marketing PartnerHealthcare software publisher and congress partner. Active contributor to APSSIS events with specialized conferences on topics including AI in healthcare.
• Orange CyberdefensecoreTechnology or IntegrationMajor cybersecurity solutions provider and congress partner contributing specialized conferences on topics including AI and cybersecurity in healthcare settings.
• FortinetcoreTechnology or IntegrationCybersecurity infrastructure provider and congress partner offering specialized conferences on topics such as network transformation in hospital settings.
• SailPointcoreTechnology or IntegrationIdentity management solutions provider and congress partner contributing to discussions on identity governance and access control in healthcare.
• ImprivatacoreTechnology or IntegrationHealthcare identity and access management provider, co-presenting with SailPoint on identity governance topics at congress.
• AxianscoreTechnology or IntegrationICT services provider and congress partner contributing specialized conferences on topics including cyber resilience and backup capabilities.
• StormshieldcoreTechnology or IntegrationCybersecurity solutions provider and congress partner focusing on healthcare data protection topics.
• DSIHcoreGTM or Marketing PartnerMedia partner providing coverage of APSSIS events and healthcare cybersecurity topics. Vice-President Xavier Lebranchu serves as Editor-in-Chief.
• ASINHPAcoreStrategic or Co-development PartnerAssociation of Health Information Systems Professionals. Strategic partner contributing to healthcare cybersecurity ecosystem with joint events and conferences.
• CAIHcoreStrategic or Co-development PartnerCentral purchasing body for healthcare institutions and congress partner supporting healthcare IT cybersecurity procurement and standards.
• Numih FrancecoreTechnology or IntegrationHealth information systems integration partner contributing to SOC deployment and IAM/SSO discussions at congress.
• HarfanglabcoreTechnology or IntegrationEndpoint protection provider and congress partner presenting on topics including defense against legitimate tools and fileless attacks.
• Trend MicrocoreTechnology or IntegrationCybersecurity solutions provider and congress partner contributing to AI security discussions in healthcare.
• GatewatchercoreTechnology or IntegrationNetwork detection and response provider and congress partner presenting on autonomous detection and decision topics.
• SentinelOnecoreTechnology or IntegrationEndpoint protection provider and congress partner contributing to AI and cybersecurity discussions for healthcare continuity.
• OlféocoreTechnology or IntegrationWeb security provider and congress partner presenting on sovereign SASE approaches for healthcare establishments.
• RubycatcoreTechnology or IntegrationPrivileged access management provider and congress partner contributing to discussions on privileged access in healthcare.
• EnovacomcoreTechnology or IntegrationHealthcare data interoperability provider and congress partner focusing on trusted data exchange.
• ARS Pays de la LoirecoreStrategic or Co-development PartnerRegional Health Agency and institutional partner supporting healthcare cybersecurity initiatives in the Pays de la Loire region.
• GRADeS ESEAcoreStrategic or Co-development PartnerRegional digital health agency and institutional partner contributing to cybersecurity intelligence discussions.
• BluefilescoreTechnology or IntegrationCybersecurity strategy provider and congress partner contributing to healthcare crisis management discussions.
• RelyenscoreTechnology or IntegrationCyber risk insurance provider and congress partner contributing to AI risk discussions.
• iTrustcoreTechnology or IntegrationCybersecurity audit and testing provider and congress partner presenting on sensitive data exfiltration response.
• HS2coreTechnology or IntegrationCybersecurity solutions provider and congress partner supporting healthcare IT security.
• DBSQWAREcoreTechnology or IntegrationDatabase expertise provider and congress partner contributing to database security discussions.
• All4teccoreTechnology or IntegrationRisk analysis tools provider and congress partner contributing to cyber risk management discussions.
• AdvenscoreTechnology or IntegrationCybersecurity services provider and congress partner contributing to AI risk discussions.
• BitdefendercoreTechnology or IntegrationEndpoint protection provider and congress partner presenting on attack surface and regulatory compliance.
• BZHuntcoreTechnology or IntegrationOffensive security testing provider and congress partner presenting on hack, trace, replay approaches.
• KNScoreTechnology or IntegrationIT solutions provider and congress partner supporting healthcare cybersecurity.
• SFR BusinesscoreTechnology or IntegrationBusiness telecom and IT services provider and congress partner contributing to AI adoption discussions.
• Alcatel-Lucent EnterprisecoreTechnology or IntegrationNetwork solutions provider and congress partner contributing to AI Ops discussions for hospital networks.
• Dell TechnologiescoreTechnology or IntegrationTechnology solutions provider and congress partner contributing to hospital cyber resilience discussions.
• SESAM-VitalecoreStrategic or Co-development PartnerHealth insurance card system operator and congress partner contributing to secure healthcare access discussions.
• GRADeS IESScoreStrategic or Co-development PartnerRegional digital health agency contributing to Rencontres SSI Santé 2026 with specialized conferences.
• ARS PACAcoreStrategic or Co-development PartnerRegional Health Agency of Provence-Alpes-Côte d'Azur contributing to Rencontres SSI Santé 2026.
• Conscio TechnologiescoreTechnology or IntegrationCybersecurity awareness provider presenting on active minority approaches for cyber culture diffusion.
• IGELcoreTechnology or IntegrationEndpoint management solutions provider presenting on secure connected hospital approaches.
• F24coreTechnology or IntegrationCrisis management and emergency notification provider presenting on coordinated alert and crisis response.
• Jizô AIcoreTechnology or IntegrationAI-powered network observability provider presenting on continuous network monitoring.
• WallixcoreTechnology or IntegrationIdentity and access management provider presenting on access delegation for healthcare IT teams.
• SemperiscoreTechnology or IntegrationActive Directory security provider presenting on healthcare AD protection.
• ZscalercoreTechnology or IntegrationCloud security provider and partner for Rencontres SSI Santé 2026.
• VirtualBrowsercoreTechnology or IntegrationSecure browsing provider presenting on remote browser isolation for hospitals.
• DigitalberrycoreTechnology or IntegrationCertificate lifecycle management provider presenting on digital certificate management for healthcare.
• Campus CybercoreStrategic or Co-development PartnerNational cybersecurity campus and institutional partner for events.

Scale indicators9 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• ISACA: Global association for IT governance, risk, and cybersecurity professionals. Comparable membership and certification model targeting security and audit professionals with potential audience overlap in French healthcare IT functions, though with much broader scope and global footprint.
• ANSSI: Agence Nationale de la Sécurité des Systèmes d'Information - the French national cybersecurity agency. Operates broadly across all sectors including healthcare, sets the regulatory frameworks (NIS 2) that APSSIS's training addresses, and represents the incumbent public-sector authority in the space where APSSIS operates as a private association.
• SANS Institute: Global cybersecurity training and certification provider. Highly comparable as a training-focused cybersecurity organization, though operating globally with a much broader scope. Represents both a competitive threat to APSSIS's RSSI Santé training and a potential content/credentialing partnership opportunity.
• (ISC)²: International nonprofit association of certified cybersecurity professionals. Comparable as a professional membership body for security practitioners with certifications and training programs, though operating globally and serving a broader scope beyond healthcare, with potential overlap in CISSP-certified members working in French hospitals.

Others

• DSIH: French healthcare IT magazine and media outlet. Listed as a media partner of APSSIS (with VP Xavier Lebranchu as Editor-in-Chief), but operates as a complementary media channel targeting the same healthcare IT decision-maker audience - making it adjacent rather than competitive.
• Campus Cyber: French national cybersecurity campus and ecosystem hub. Listed as a strategic partner of APSSIS, but operates as a broader cybersecurity community and event platform in France - making it adjacent/complementary rather than directly competitive, and a potential venue or co-marketing partner.

Direct peers

• CESIN: Club des Experts de la Sécurité de l'Information et du Numérique - French CISOs club. Directly comparable professional community model serving CISOs and security leaders in France, with significant overlap in audience (enterprise security officers) with APSSIS, though serving all verticals rather than exclusively healthcare.
• AFCDP: Association Française des Correspondants à la protection des Données à caractère Personnel - French association for DPOs. Highly comparable professional association structure for data protection professionals, with substantial audience overlap with APSSIS (DPO/RSSI roles frequently overlap within French healthcare establishments).
• CLUSIF: Club de la Sécurité de l'Information Français - the leading French association for cybersecurity professionals. Closely comparable to APSSIS as a membership-based professional association serving security practitioners in France, though with a broader scope across all industries rather than healthcare-specialized.
• CERT Santé: French healthcare Computer Emergency Response Team. Most direct functional comparable to APSSIS as a healthcare-specific cybersecurity knowledge and incident response resource for French hospitals, though operates as a government-supported entity rather than an independent member association.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/apssisfrance
• YouTubeyoutube.com/channel/UCdFRmqV4xXKSpBm
• Facebookfacebook.com/profile.php
• LinkedInlinkedin.com/company/apssis
• Instagraminstagram.com/apssis_off

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles13 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Apssis