Agence nationale de la sécurité des systèmes d'information

The Agence nationale de la sécurité des systèmes d'information (ANSSI; English: French National Cybersecurity Agency) is a French service created on 7 July 2009 with responsibility for computer security.[2]

French National Cybersecurity Agency [1]
Agence nationale de la sécurité des systèmes d'information
AbbreviationANSSI
Formation7 July 2009 (2009-07-07)
Headquarters51 boulevard de la Tour-Maubourg 75700 Paris SP 07
Director General
Guillaume Poupard
Budget (2018)
€100 million
Staff (2018)
600
Websitessi.gouv.fr

ANSSI reports to the Secretariat-General for National Defence and Security (SGDSN) to assist the Prime Minister in exercising his responsibilities for defence and national security.

ANSSI replaced the Central Directorate of Computer Security, which on July 31, 2001 replaced the SCSSI.

Guillaume Poupard, Chief Engineer of Armaments, was appointed Director General of ANSSI on 27 March 2014,[3][4] succeeding Patrick Pailloux.

ANSSI has a budget of €80 million (2014) and a workforce of 500 in 2015[5] and with a target of 567 by the end of 2017.

In 2016, according to Le Monde, the ANSSI would have thwarted what seemed to be a simple attack, an interference by the Russians during the French presidential campaign of 2016. "This is not a simple hacking operation, but an attempt to destabilize the French presidential election,"[6] wrote En marche! in the early evening of May 5, 2017.

Background and context

ANSSI is heir to a long line of bodies responsible for ensuring the security of sensitive information belonging to the French State:[7]

  • 1943: Computing Technical Directorate (created in Algiers);
  • 1951: Computing Technical Service Centre (in Paris);
  • 1977: the Central Communications Security Establishment;
  • 1986: the Central Service for Computer Security;
  • 2001: Central Directorate of Computer Security.

These organizations initially created in a military security perspective confidential information and data protection have gradually evolved. In 1986, the Central Communications Security Establishment has been replaced by the Central Service for Computer Security. Today ANSSI retains a mission of the defence of state information systems, but is also charged with a mission to provide advice and support to government and operators of critical national infrastructure.

Missions

ANSSI has the following mission:

"The agency ensures the mission of national authority security of information systems. As such it is responsible for proposing rules for the protection of state information systems and verify the implementation of measures adopted. In the field of cyber defence, it provides a monitor, detect, alert and reaction to computer attacks, especially on the networks of the State."[8]

Organization

Management
Patrick Pailloux with ANSSI during dating Journées Réseaux 2013 in Montpellier.

ANSSI is headed by a Director General (currently Guillaume Poupard), appointed by the Prime Minister. He is assisted by a Deputy Director and a Chief of Staff.

ANSSI has five sub-directorates:

  • the Centre for the Operational Security of Information Systems (in French) (COSSI) that ensures the implementation of the defense authority-based information systems devoted to ANSSI.
  • Sub-Directorate Expertise (SDE)[9] which carries the overall mission of expertise and technical assistance of the agency. It supports all the other sub-directorates ANSSI, ministries, industry and providers of security and vital operators.
  • Sub-Directorate Secure Information Systems (SIS)[10] which carries the mission to propose, design and implement products and secure information systems for the benefit of ministries, operators and vital importance ANSSI .
  • Sub-Directorate External Relations and Coordination (RELEC)[11] that animates, transverse manner, the external relations of the agency, coordination of interventions and the development of regulations.
  • Sub-Directorate General Affairs (SDAG)[12] in charge of preparing and managing support of administrative activities at ANSSI.

ANSSI also has its own training centre, the Safety Training Centre for Information Systems (CFSSI),[13] including delivering degrees in computer security (ESSI), registered in the National Directory of Professional Certifications.

Governance

ANSSI governance is ensured by a Strategic Committee[14] including:

Means

According to a Senate report, although significant efforts have been put in place in recent years, the situation in France with regard to the threat from cyber attacks is still unsatisfactory. Indeed, ANSSI lacks financial and human resources comparable to its American, British and German counterparts.[15]

Human resources
YearsWorkforce
2009 (first year)120
2011170
2012250
2013360
2015500
2015460[16]
2016500[17]
2017550[18]
2018600[19]

To meet the national challenge of cyber security, ANSSI continues to expand its teams with positions to be filled in all line of work.[19] The aim is to reach 675 agents in 2022 according to the Public Finance Programming Bill of 2018.[20]

Financial resources
YearBudget
2009€45 million
2012€75 million
2014€83 million
2018€100 million[20]

See also

References
  1. http://www.ssi.gouv.fr/en/
  2. Décret n° 2009-834 du 7 juillet 2009 portant création d'un service à compétence nationale dénommé « Agence nationale de la sécurité des systèmes d'information » (in French)
  3. "Guillaume Poupard prend la tête de l'Anssi" (in French). Retrieved 28 March 2014.
  4. Décret du 27 mars 2014 portant nomination du directeur général de l'Agence nationale de la sécurité des systèmes d'information - M. POUPARD (Guillaume) (in French)
  5. Question no 29424 de M. Julien Aubert sur les moyens publics alloués à la cyberdéfense, National Assembly, Réponse publiée le : 24/09/2013.
  6. "Communiqué de presse - En Marche a été victime d'une action de piratage massive et coordonnée". La République En Marche ! (in French). 2017-05-05. Retrieved 2020-09-11.
  7. Historique de l'ANSSI Archived October 30, 2014, at the Wayback Machine (in French)
  8. Présentation des missions sur le site de l'ANSSI ssi.gouv.fr (in French)
  9. Présentation de la sous-direction SDE sur le site de l'ANSSI ssi.gouv.fr (in French)
  10. Présentation de la sous-direction SIS sur le site de l'ANSSI ssi.gouv.fr (in French)
  11. Présentation de la sous-direction RELEC sur le site de l'ANSSI ssi.gouv.fr (in French)
  12. Présentation de la sous-direction SDAG sur le site de l'ANSSI ssi.gouv.fr (in French)
  13. Présentation du CFSSI sur le site de l'ANSSI ssi.gouv.fr Archived July 18, 2015, at the Wayback Machine (in French)
  14. Comité stratégique de la SSI sur le site de l'ANSSI ssi.gouv.fr Archived October 1, 2015, at the Wayback Machine (in French)
  15. La cyberdéfense : un enjeu mondial, une priorité nationale (in French)
  16. https://www.ssi.gouv.fr/uploads/2016/09/rapport_annuel_2015_anssi.pdf
  17. https://www.ssi.gouv.fr/uploads/2016/09/rapport_annuel_anssi_2016.pdf
  18. https://www.ssi.gouv.fr/uploads/2018/04/rapport_annuel_2017_anssi.pdf
  19. https://www.ssi.gouv.fr/recrutement/
  20. https://michelcanevet.wordpress.com/2018/04/28/controle-budgetaire-agence-nationale-de-la-securite-des-systemes-dinformation-anssi-communication-intervention-le-18-avril-2018/
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.