Dans un contexte où les échanges numériques sont au cœur des processus métiers, la sécurisation des flux applicatifs et des API n’est plus une option mais une exigence opérationnelle. Cet article explique, pour les RSSI, DSI et responsables sécurité, pourquoi le protocole TLS et la gestion rigoure...

Face à la menace grandissante, les entreprises et organisations n’ont plus le choix que d’investir dans leur cybersécurité. En complément des outils technologiques de pilotage des risques cyber, contracter une cyber insurance s’avère obligatoire.

Les conséquences d’une cyberattaque sont multiple...

Cyber risk management for suppliers: digital service providers face the dual challenge of compliance and performance

With the rise in cyberattacks and the introduction of new European regulations (NIS2, DORA, CRA), digital services companies (DSCs) are facing a strategic challenge: protecting t...

The digitization of corporate working practices has accelerated since the Covid-19 crisis, amplifying a worrying shortage of cybersecurity professionals. While many organizations are investing in increasingly complex IT infrastructures, professionals capable of understanding the very nature of cyber...

The number of cyber incidents handled by ANSSI fell by 20% in 2022; yet, with regard to local authorities, the threat is not waning. Quite the contrary: at the presentation of the latest cyber threat panorama, the new director of ANSSI (January 2023), Vincent Strubel, indicated that 23% of ransomwar...

Will we have to wait for a new "cyber Pearl Harbor" to become aware of cyber risks? The term "cyber Pearl Harbor" was coined by a U.S. senator after the December 2020 attack on the U.S. federal government, via software supplier SolarWinds. The SolarWinds affair was a global trauma, prompting many or...

3 Security Rating®, the answer from Board of Cyber

For a company, the added value of a reliable, controlled cyber rating is significant. As Julien Steunou, Associate Director - SOC CERT CWATCH at Almond, a Board Of Cyber partner, explains, "cyber rating is an important decision-making element in r...

2 Distrustful companies, uneven solutions

While a growing number of companies of all sizes have understood the importance of a controlled cyber rating, some still perceive it as an intrusion.... Julien Steunou, Associate Director - SOC CERT CWATCH at Almond, a Board Of Cyber partner, points out th...

1 Ubiquitous risk, essential protection

In 2016, if you asked a CISO what his day was made of, he would answer "Cloud", "Antivirus", "General Data Protection Regulation" or "connected objects". He would tell you about his fears of cyber-attacks and his company's lack of maturity, still too fragile...

The upcoming version, ISO 27002:2021, also brings a lot of new elements, both in substance and in form. These changes will not be without consequences for CISOs. They echo the normative inflation observed in recent years and deserve in-depth analysis.

1 - Introduction

In 2021, the flagship fra...