{"id":227499,"date":"2023-11-09T11:31:27","date_gmt":"2023-11-09T10:31:27","guid":{"rendered":"https:\/\/www.intrinsec.com\/?p=227499"},"modified":"2023-11-09T11:31:27","modified_gmt":"2023-11-09T10:31:27","slug":"cyberscore","status":"publish","type":"post","link":"https:\/\/www.intrinsec.com\/en\/cyberscore\/","title":{"rendered":"Everything you need to know about the Cyberscore"},"content":{"rendered":"

[et_pb_section fb_built= \u00bb1\u2033 _builder_version= \u00bb4.22.2\u2033 _module_preset= \u00bbdefault \u00bb global_colors_info= \u00bb{} \u00bb][et_pb_row column_structure= \u00bb1_2,1_2\u2033 _builder_version= \u00bb4.22.2\u2033 _module_preset= \u00bbdefault \u00bb custom_margin= \u00bb|auto||3px|| \u00bb custom_padding= \u00bb0px|||0px|| \u00bb global_colors_info= \u00bb{} \u00bb][et_pb_column type= \u00bb1_2\u2033 _builder_version= \u00bb4.22.2\u2033 _module_preset= \u00bbdefault \u00bb global_colors_info= \u00bb{} \u00bb][et_pb_text _builder_version= \u00bb4.22.2\u2033 _module_preset= \u00bbdefault \u00bb custom_margin= \u00bb2px||||| \u00bb global_colors_info= \u00bb{} \u00bb]<\/p>\n

Introduction of the Cyberscore system<\/h1>\n

As we live in an increasingly digital world, the security of our personal data remains a major concern. Who hasn't heard of a cyberattack in recent years? It is in this context that France has decided to take action with the introduction of the Cyber-Score Law. Let's explore this new initiative together.<\/p>\n

[\/et_pb_text][\/et_pb_column][et_pb_column type="1_2" _builder_version="4.22.2" _module_preset="default" global_colors_info="{}"][et_pb_image src="https:\/\/www.intrinsec.com\/wp-content\/uploads\/2023\/11\/cyberscore1.jpg" alt="cyberscore" title_text="cyberscore" _builder_version="4.22.2" _module_preset="default" custom_margin="|-160px||||" custom_padding="|||229px||" global_colors_info="{}"][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version="4.22.2" _module_preset="default" custom_margin="|-162px||1px||" custom_padding="|13px||||" global_colors_info="{}"][et_pb_column type="4_4" _builder_version="4.22.2" _module_preset="default" global_colors_info="{}"][et_pb_text _builder_version="4.22.2" _module_preset="default" custom_padding="|0px||0px||" global_colors_info="{}"]<\/p>\n

Cyber-score Law: A legislative response to a major challenge<\/strong><\/h2>\n

The Senate report of February 16, 2022, brought to light by Senator Anne-Catherine Loisier, revealed a surprising fact: despite a significant increase in cyberattacks, many companies do not seem to be adapting their strategies accordingly. Such a finding is alarming in the digital age.<\/p>\n

To counter this phenomenon, France introduced Law No. 2022-309 of March 3, 2022. Its mission? To require digital platforms to inform the public about the level of security of their data. This is a significant step forward, especially since this law goes beyond the well-known GDPR in terms of transparency.<\/p>\n

Who is affected and how?<\/strong><\/h2>\n

The scope of this law is broad. It mainly concerns digital platforms, messaging services and video conferencing software that exceed 25 million unique visitors per month from French territory in 2024.<\/p>\n

The core of this regulation rests on a cybersecurity audit, conducted by a PASSI-qualified provider accredited by the French National Cybersecurity Agency (ANSSI). This audit will focus not only on data location, but also on criteria such as organization, data protection, and secure development.<\/p>\n

The goal: A clear indicator for consumers<\/strong><\/h2>\n

Imagine for a moment having the power to know at a glance how robust a website's security is, much like the Nutri-Score for food products. That's the goal of the CyberScore, which will be prominently displayed on platforms. This way, every user can make informed choices about protecting their data.<\/p>\n

What if we don't comply?<\/strong><\/h2>\n

The law is clear on this point. Any failure to display the cyber score can result in significant financial penalties. But beyond the financial aspect, a company's reputation could be severely damaged.<\/p>\n

This is the logic of "name and shame," which is also found in the 2024 Military Programming Law (LPM 2024) for software publishers who fail to patch their vulnerabilities. The expression "name and shame" is Anglo-Saxon and can be translated into French as "nommer et d\u00e9shonorer" or "d\u00e9noncer publique." It aims to publicly identify and denounce individuals, companies, or organizations for behavior deemed reprehensible, inappropriate, or contrary to certain norms or values.<\/p>\n

What is the timeframe?<\/strong><\/h2>\n

According to the law, the cyber score is normally mandatory since 1er<\/sup> As of October 2023, the implementing decree has not yet been published, making its application problematic.<\/p>\n

However, a draft decree has been circulated, and it gives a glimpse of the outlines of the requirements.<\/p>\n

How to prepare for it?<\/strong><\/h2>\n

The themes that will be addressed by the requirements of the new system are:<\/p>\n