PASSI / 01
Organizational & Physical Audit
Review governance, security policies, operational controls and physical safeguards.
DGSSI qualified
Master cybersecurity with expert-led training programs. View Training
Officially qualified by DGSSIQualified to audit.
Qualified to audit.
Built to protect.
NearSecure is an officially qualified PASSI (Information Systems Security Audit Provider) by Morocco’s General Directorate of Information Systems Security (DGSSI). Trusted expertise for critical systems, built on rigorous audit standards.
- 6 qualified audit domains
- Class A & B systems
- Public registry verification
Regulatory assurance / PASSIQualified
Official qualification record
- Registered provider
- NearSecure
- Systems classification
- Class A + Class B
- Qualification expiry
- 18 / 08 / 2029
- Qualified domains
- 06 / 06 verified
06 / 06
Qualified disciplines
A & B
System classes
2029
Expiry year
Official DGSSI public registry
Qualification status independently verifiable at source.
Qualified capabilities
Six domains. One trusted partner.
The official DGSSI registry lists NearSecure as qualified in all six regulated information systems security audit domains.
PASSI / 02
Architecture Audit
Assess infrastructure design, trust boundaries, segmentation and architecture-level risk.
DGSSI qualified
PASSI / 03
Configuration Audit
Examine hardening, security settings and technical controls across critical assets.
DGSSI qualified
PASSI / 04
Penetration Testing
Safely validate exploitable weaknesses in networks, applications and exposed services.
DGSSI qualified
PASSI / 05
Source Code Audit
Identify security flaws in application logic, implementation and sensitive code paths.
DGSSI qualified
PASSI / 06
Industrial Systems Audit
Evaluate the security of OT and industrial environments with operational constraints in mind.
DGSSI qualified
Regulatory assurance
Confidence backed by a national framework.
Under Morocco’s Law 05-20 and implementing Decree 2-21-406, qualified PASSI providers play an important role in the security audits required for applicable entities and vital infrastructures operating sensitive information systems.
- Qualification assessed against DGSSI requirements
- Coverage for Class A and Class B information systems
- Six officially validated audit areas
Regulatory scope / Morocco
- Qualification authority
- DGSSI
- Legal framework
- Moroccan cybersecurity law
- Implementing decree
- Regulated security auditing
- Qualified system classes
- Information systems
- Qualification validity
- Per public DGSSI registry
Direction Générale de la Sécurité des Systèmes d’Information
Engagement methodology
From assessment to action.
A clear engagement model designed to turn assessment findings into measurable improvements.
- 01
Scope & Plan
Agree the objectives, audit perimeter, constraints and engagement rules.
- 02
Assess & Test
Perform structured reviews and controlled technical verification.
- 03
Report & Prioritize
Deliver evidence-led findings, risk rankings and a practical roadmap.
- 04
Remediate & Strengthen
Support remediation planning and improvement of security controls.
Verify our qualification at the source.
Consult the official DGSSI list of qualified PASSI providers for current status, domains, authorized classes and expiry date.
NearSecure / Attack to protect
Ready for your next qualified security audit?
Tell our specialists about your infrastructure, objectives and regulatory requirements. We’ll help you define the right assessment scope.