ORLEANS - ISP, GRC Profile

Project overview

The present market aims to strengthen production capacity regarding security approval for essential digital services.

Objectives:

ARTICLE 3. PRESENTATION OF THE EXISTING SITUATION - CONTEXT

The approval process is inspired by the ANSSI's 9-step approval process. This process is inspired by the ANSSI's 9-step approval process.

The evaluation of security needs makes it possible to identify the digital service's security stakes and select the appropriate approval approach:

For 2027, it is planned to handle:

ARTICLE 4. DESCRIPTION OF NEEDS – FUNCTIONAL SPECIFICATIONS

4.1 PRELIMINARY EVALUATION OF SECURITY NEEDS

This involves a project launch meeting for the approval process, presenting the approach, and completing the evaluation questionnaire with the project team.

Expected deliverables:

4.2 CONDUCT SECURITY AUDITS

The security audit is conducted with the technical referent and assesses the service's compliance with the institution's security policy, identifying deviations and security flaws.

4.3 PREPARE THE APPROVAL FILE

The standard approval file is created using the ANSSI MonServiceSécurisé application.

The file is completed in consultation with the project manager and the technical referent.

The high-stakes file may be supplemented by a risk analysis.

Expected deliverables are:

4.4 PRESENT THE FILE DURING THE APPROVAL COMMISSION

The approval commission consists of the project team, the CISO, the digital director or their representative, and the security engineer who prepared the file.

The minutes are signed by the Deputy Director General. The file is logged in the GRC software.

.

Profile sought

Coordination and teamwork with the technical referent, the business project manager, and the security team.

Coordination and teamwork with the technical referent, the project manager, and the security team.

Work environment

The client is required to carry out security approvals for public service digital services under its responsibility, as well as for high-stakes applications for the institution, in accordance with national regulations (IGI 1337) and the directives of the Ministry of Research.

• Evaluate security needs for applications;
• Conduct security audits;
• Prepare the approval file;
• Present the file during the approval commission
• Simplified
• Standard
• Advanced
• 16 renewal files
• 13 new files
• Security needs evaluation form
• Meeting minutes
• Internal audit report
• The monservicesécurisé evaluation form
• The action plan
• The approval minutes
• Presentation support
• Completed approval minutes

Project details

• Start: ASAP
• Duration: 3 mois renouvelable
• Location: Orléans, Centre-Val de Loire, FR
• Rate: 50-69 EUR/h
• Languages: French