Translations:CI Crise cyber et entraînement/2/en

The importance of implementing crisis management and business continuity processes is further illustrated by the existence of numerous related standards (ISO 27001, 27031, 22301, and 31000) and the establishment of the European Network and Information System Security Directive (NIS, 2016). The implementation of generic measures, now widely used in the organizations covered by these texts, is no longer sufficient to deal with the intensity, complexity and duration of a cyber crisis. To this end, ANSSI has published a "Crisis" collection of three guides sharing recommendations on the organization of crisis exercises (in collaboration with CCA), crisis communication (in collaboration with CapCom') and cyber crisis management (in collaboration with CDSE). These guides must now be accompanied by more operational elements to help organizations grow in maturity.