{"id":66,"date":"2025-02-27T13:13:45","date_gmt":"2025-02-27T13:13:45","guid":{"rendered":"https:\/\/www.intrinsec.com\/?page_id=66"},"modified":"2025-10-02T12:11:00","modified_gmt":"2025-10-02T12:11:00","slug":"public","status":"publish","type":"page","link":"https:\/\/www.intrinsec.com\/en\/public\/","title":{"rendered":"Audience"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

\n Public sector<\/span> <\/h1>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Pragmatic and compliant cybersecurity support for local authorities and public bodies<\/span><\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t<\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\tGet in touch<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

1. Public Information Systems Security: Audit, Compliance, and ISS Strategy. Strengthen the IT security and resilience of your public servers, infrastructure, systems, and networks through IT security audits aligned with ANSSI standards and regulatory requirements: CyberScore, GDPR, RGS, HDS, etc. 2. Public IS Vulnerability Mapping, Management, and Monitoring. Identify, analyze, and secure the exposure of all your IT assets: comprehensive mapping, security level assessment, and technical and organizational measures. 3. Operational Security and Monitoring: Outsourced\/Shared Public SOC and Incident Management. Integrate a dedicated\/pooled SOC solution: detection of security incidents, security vulnerabilities, and alerts on shadow IT, business information systems, and connected assets. 4. IT Security Solutions, Encryption, and CNIL\/ANSSI Compliance. Benefit from a turnkey solution: cryptography, data encryption, access\/password management, GDPR\/PGSSI-SA compliance, and regulatory technical documentation. 5. Governance, IT security policies & IT security management for local authorities: Deploy an IT security policy tailored to the public organization: master plan, security master plan, RACI matrix, CIO\/elected official reporting, participatory IT security committee\/unit. 6. Raise user awareness and create an IT security culture among elected officials and public employees: Train, inform, and engage elected officials, CIOs, employees, and managers with targeted campaigns: e-learning, quizzes, workshops, short documentation, non-technical onboarding. 7. Securing the cloud, connected infrastructures, and digital transformation of public organizations: Harden cloud, SaaS, Azure\/OVHpublic, connected objects, hybrid infrastructures: security audits, risk analysis, disaster recovery\/business continuity plans, PASSI compliance, PACS, LPM, etc. 8. Managing IT Suppliers, Subcontractors, and Service Providers in a Distributed Public Context: Master shadow IT, vendor risk, and securing inter-municipal\/supplier data flows: audit procedures, RGS documentation, and management of information systems security contracts. 9. IT Risk Analysis, Security Policy, and Information Systems Security Reporting Tailored to Local Authorities: Support CIO and management decision-making: methodical risk analysis, CyberScore dashboard, clear reporting, and policies adapted to operational realities. 10. Business Continuity, Disaster Recovery Plans\/Business Continuity Plans, and Public Cybersecurity Crisis Management Procedures: Guarantee the continuity and robustness of public service under all circumstances through tailored Disaster Recovery Plans\/Business Continuity Plans, incident\/crisis procedures, and resource pooling.<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Priority sectoral issues<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Departments, Regions, Cities, Public Interest Groups, national agencies, institutions: the public sector is on the front line against cyber threats. Yet, budget cycles, organizational complexity, regulatory obligations, and the diversity of IT systems make security difficult to manage without structured support.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

Protecting administrative and user data<\/h3><\/div>\n <\/div>\n\n
\n \n
\n

Civil registry, HR, urban planning, social services, GIS, etc.<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

Consolidating heterogeneous IT environments<\/h3><\/div>\n <\/div>\n\n
\n \n
\n

Business software, Cloud, legacy systems<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/i>\n <\/div>\n \n

Responding to targeted cyberattacks<\/h3><\/div>\n <\/div>\n\n
\n \n
\n

(ransomware, double extortion)<\/strong> SOC, EDR, PCA applications<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

Comply with sector-specific obligations<\/h3><\/div>\n <\/div>\n\n
\n \n
\n

CNIL, ANS, HDS certification, PGSSI-S framework<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

Managing service providers in open management structures<\/h3><\/div>\n <\/div>\n\n
\n \n
\n

Managed services, local publishers, multiple IT services companies<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

Create an information security culture within management<\/h3><\/div>\n <\/div>\n\n
\n \n
\n

General managers, IT directors, HR managers, elected officials: all involved at their level<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

\n What this <\/span>\n\t\t\t\t\t\t\t\t\t<\/span>\n \n course<\/span><\/svg><\/span><\/span> <\/span><\/span>allows you to pilot<\/span> <\/h2>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n
\n \n
\n
\n
\n
\n\n
\n

\"\"<\/h3>

Strategy & Governance<\/strong><\/span><\/h3>

Proposed actions<\/strong><\/p>

Adapted information systems security plan, security master plan, RACI matrix for information systems security, committees<\/p>

Business value<\/strong><\/p>

Structuring governance without over-administering<\/p> <\/div>\n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n \n

\n
\n
\n
\n\n
\n

\"\"<\/h3>

Risks & Compliance<\/strong><\/span><\/h3>

Proposed actions<\/strong><\/p>

Application mapping, CNIL compliance, CyberScore, PGSSI local authority<\/p>

Business value<\/strong><\/p>

Knowing where to act, with which levers, and at what cost<\/p> <\/div>\n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n \n

\n
\n
\n
\n\n
\n

\"\"<\/h3>

Architecture & SecOps<\/strong><\/span><\/h3>

Proposed actions<\/strong><\/p>

AD + Cloud review (Azure, Office, SaaS business solutions), access hardening<\/p>

Business value<\/strong><\/p>

Identify exploitable vulnerabilities without a complete overhaul.<\/p> <\/div>\n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n \n

\n
\n
\n
\n\n
\n

\"\"<\/strong><\/span><\/h3>

Cyber Defense Operations<\/strong><\/span><\/h3>

Proposed actions<\/strong><\/p>

Outsourced or shared SOC, EDR for critical workstations<\/p>

Business value<\/strong><\/p>

Providing rapid detection even without internal resources<\/p> <\/div>\n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n \n

\n
\n
\n
\n\n
\n

\"\"<\/h3>

Incident & Crisis<\/strong><\/span><\/h3>

Proposed actions<\/strong><\/p>

Quick reference guides for IT\/DGS, incident management kit, single point of contact<\/p>

Business value<\/strong><\/p>

React quickly without disrupting management or staff<\/p> <\/div>\n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n \n

\n
\n
\n
\n\n
\n

\"\"<\/strong><\/span><\/h3>

Resilience<\/strong><\/span><\/h3>

Proposed actions<\/strong><\/p>

Business continuity\/disaster recovery plan for local authorities, offsite backup, business dependencies<\/p>

Business value<\/strong><\/p>

Maintaining operations without a complex IT plan<\/p> <\/div>\n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n \n

\n
\n
\n
\n\n
\n

\"\"<\/h3>

Cyber culture<\/strong><\/span><\/h3>

Proposed actions<\/strong><\/p>

Awareness-raising for elected officials, staff, and managers; visual aids and quizzes<\/p>

Business value<\/strong><\/p>

Mobilize without dramatizing, channel the right reflexes<\/p> <\/div>\n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n

\n <\/path><\/svg> <\/div>\n
\n <\/path><\/svg> <\/div>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

For whom?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

<\/h4><\/div>\n <\/div>\n\n
\n \n
\n

Local authorities (municipalities, departments, regions, inter-municipal bodies)<\/strong><\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

<\/h4><\/div>\n <\/div>\n\n
\n \n
\n

Public institutions and state or decentralized agencies<\/strong><\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

<\/h4><\/div>\n <\/div>\n\n
\n \n
\n

Actors in education, culture or local development<\/strong><\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

<\/h4><\/div>\n <\/div>\n\n
\n \n
\n

Organizations managing public service delegations (DSP), public interest groups (GIP), public project management assistance (AMO), or citizen data<\/strong><\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Course Content Public Sector<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\n\t\t\t\t\t\t\t\n\t\t\n\t\t\t\t\n\t\t\t
\n\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\tInitial framing\t\t\t\t<\/span>\n\t\t\t<\/h6>\n\t\t\n\n\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\n\t\t\n\t\t\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t