Agence nationale de la sécurité des systèmes d'information

Last updated

French National Cybersecurity Agency [1]
Agence nationale de la sécurité des systèmes d'information
AbbreviationANSSI
Formation7 July 2009 (2009-07-07)
Headquarters51 boulevard de la Tour-Maubourg 75700 Paris SP 07
Director General
Vincent Strubel
Budget (2018)
€100 million
Staff (2018)
600
Website cyber.gouv.fr

The Agence nationale de la sécurité des systèmes d'information (ANSSI; English: French National Agency for the Security of Information Systems) is a French service created on 7 July 2009 with responsibility for computer security. [2]

Contents

ANSSI reports to the Secretariat-General for National Defence and Security (SGDSN) to assist the Prime Minister in exercising his responsibilities for defence and national security.

ANSSI replaced the Central Directorate of Computer Security  [ Wikidata ], which on July 31, 2001, replaced the SCSSI.

Guillaume Poupard, Chief Engineer of Armaments, was appointed director general of ANSSI on 27 March 2014, [3] [4] succeeding Patrick Pailloux  [ Wikidata ].

Vincent Strubel succeeds Guillaume Poupard as new director general on January 4, 2023. [5]

ANSSI has a budget of €80 million (2014) and a workforce of 500 in 2015, [6] with a target of 567 by the end of 2017.

Background and context

ANSSI is heir to a long line of bodies responsible for ensuring the security of sensitive information belonging to the French State: [7]

These organizations initially created in a military security perspective confidential information and data protection have gradually evolved. In 1986, the Central Communications Security Establishment has been replaced by the Central Service for Computer Security. Today ANSSI retains a mission of the defence of state information systems, but is also charged with a mission to provide advice and support to government and operators of critical national infrastructure.

Missions

ANSSI has the following mission:

"The agency ensures the mission of national authority security of information systems. As such it is responsible for proposing rules for the protection of state information systems and verify the implementation of measures adopted. In the field of cyber defence, it provides a monitor, detect, alert and reaction to computer attacks, especially on the networks of the State." [8]

Organization

Management

Patrick Pailloux with ANSSI during dating Journees Reseaux 2013 in Montpellier. Patrick Pailloux.jpg
Patrick Pailloux with ANSSI during dating Journées Réseaux 2013 in Montpellier.

ANSSI is headed by a director general (currently Vincent Strubel), appointed by the Prime Minister. He is assisted by a deputy director and a chief of staff.

ANSSI has five sub-directorates:

ANSSI also has its own training centre, the Safety Training Centre for Information Systems (CFSSI), [13] including delivering degrees in computer security (ESSI), registered in the National Directory of Professional Certifications.

Governance

ANSSI governance is ensured by a Strategic Committee [14] including:

Means

According to a Senate report, although significant efforts have been put in place in recent years, the situation in France with regard to the threat from cyber attacks is still unsatisfactory. Indeed, ANSSI lacks financial and human resources comparable to its American, British and German counterparts. [15]

Human resources

YearsWorkforce
2009 (first year)120
2011170
2012250
2013360
2015500
2015460 [16]
2016500 [17]
2017550 [18]
2018600 [19]
2019610 [20]
2020548 [21]
2021573 [22]

To meet the national challenge of cyber security, ANSSI continues to expand its teams with positions to be filled in all line of work. [19] The aim is to reach 675 agents in 2022 according to the Public Finance Programming Bill of 2018. [23]

Financial resources

YearBudget
2009€45 million
2012€75 million
2014€83 million
2018€100 million [23]
2020€21 million (excluding payroll) [24]
2022€23 million (excluding payroll) [25]

Activities

2017 Macron e-mail leaks

According to French newspaper Le Monde , the ANSSI would have thwarted what seemed to be a simple attack, an interference by the Russians during the French presidential campaign of 2017. [26] "This is not a simple hacking operation, but an attempt to destabilize the French presidential election," [27] wrote the political party En marche! in the early evening of May 5, 2017.

Following the data leak, ANSSI opened an investigation into the breach. [28]

See also

Related Research Articles

<span class="mw-page-title-main">National Police (France)</span> Civil police force of France

The National Police, formerly known as the Sûreté nationale, is one of two national police forces of France, the other being the National Gendarmerie. The National Police is the country's main civil law enforcement agency, with primary jurisdiction in cities and large towns. By contrast, the National Gendarmerie has primary jurisdiction in smaller towns, as well as in rural and border areas. The National Police comes under the jurisdiction of the Ministry of the Interior and has about 145,200 employees. Young French citizens can fulfill their mandatory service in the police force.

<span class="mw-page-title-main">Transglobal Secure Collaboration Participation</span>

The Transglobal Secure Collaboration Participation, Inc. (TSCP), which sponsors the Transglobal Secure Collaboration Program, was established in 2002 as a collaborative forum of organizations in the defense industry to address security issues with collaboration. TSCP is a government and industry partnership for secure electronic transmission and sharing of sensitive information internationally.

The French Institut de radioprotection et de sûreté nucléaire (IRSN) located in Fontenay-aux-Roses is a public official establishment with an industrial and commercial aspect (EPIC) created by the AFSSE Act and by February 22, 2002 decreed n°2002-254. The IRSN is placed under the conjoint authority of the Defence minister, the Environmental minister, the Industry minister and the Health and Research minister.

<span class="mw-page-title-main">National Gendarmerie</span> Militarised police force in France

The National Gendarmerie is one of two national law enforcement forces of France, along with the National Police. The Gendarmerie is a branch of the French Armed Forces placed under the jurisdiction of the Ministry of the Interior, with additional duties from the Ministry of Armed Forces. Its responsibilities include policing smaller towns, suburbs and rural areas, crowd and riot control, and criminal investigation, including cybercrime. By contrast, the National Police is a civilian law enforcement agency that is in charge of policing cities and larger towns. Because of its military status, the Gendarmerie also fulfills a range of military and defence missions. The Gendarmerie has a strength of around 102,269 people.

<span class="mw-page-title-main">General Directorate for Internal Security</span> French interior intelligence agency

The General Directorate for Internal Security is a French security agency. It is charged with counter-espionage, counter-terrorism, countering cybercrime and surveillance of potentially threatening groups, organisations and social phenomena.

<span class="mw-page-title-main">DRSD</span> French security agency

DRSD is the abbreviation of Direction du Renseignement et de la Sécurité de la Défense, a French security agency which is part of the Ministry of Armed Forces. It was established on 10 October 2016 out of the Directorate for Defense Protection and Security, which was founded on 20 November 1981.

National Cyber Security Centre, National Cyber Security Center, or National Cybersecurity Center may refer to:

<span class="mw-page-title-main">Mireille Clapot</span> French politician

Mireille Clapot is a French politician of Renaissance (RE) who has been serving as a member of the National Assembly from 2017 elections to 2024, representing the 1st constituency of the Drôme department.

<span class="mw-page-title-main">Frédéric Petit (21st century politician)</span> French politician (born 1961)

Frédéric Petit, is a French engineer and politician. He is belonging to the Democratic Movement. Since 19 June 2017, he serves as a member of the French National Assembly where he represents the Seventh constituency for French residents overseas.

<span class="mw-page-title-main">Caroline Janvier</span> French politician

Caroline Janvier is a French politician who has represented the 2nd constituency of the Loiret department in the National Assembly since 2017. She is a member of La République En Marche! (LREM).

<span class="mw-page-title-main">Loi pour une République numérique</span> French law

The loi pour une République numérique is a French law first proposed by Axelle Lemaire, Secretary of State for Digital Affairs, voted on 7 October 2016.

<span class="mw-page-title-main">Maud Olivier</span> French politician

Maud Olivier is a French politician. A member of the Socialist Party, she was a Deputy for the Essonne's 5th constituency, General Councillor for the Canton of Les Ulis and Mayor of Les Ulis.

The Study Mission on the Spoliation of Jews in France, also known as the Mission Mattéoli, was set up in March 1997 by Alain Juppé, then Prime Minister, and chaired by Jean Mattéoli.

The Institute forStrategic Research, known by its French acronym IRSEM, is a research institute of the French Ministry of Armed Forces. Located in the complex of buildings of the École militaire, it has a staff of around forty people. It was managed from 2009 to 2015 by Frédéric Charillon and from 2016 to 2022 by Jean-Baptiste Jeangène Vilmer. Fully financed by the Ministry of the Armed Forces, IRSEM is an independent part of the ministry.

<span class="mw-page-title-main">Lambert Sonna Momo</span> Swiss computer scientist, cryptographer, entrepreneur (born 1970)

Lambert Sonna Momo is a Swiss computer scientist of Cameroonian origin. He is known for his work in electronic identification and authentication through biometrics.

Rank comparison chart of Non-commissioned officer and enlisted ranks for armies/land forces of Francophone states.

The Parliamentary Office for the Evaluation of Scientific and TechnologicalChoices is responsible for informing the French Parliament of the consequences of scientific and technological choices in order to inform its decisions. It collects information, implements study programs and carries out evaluations. It plays the role of interlocutor recognized by the entire scientific community. It has thus established a partnership with the French Academy of Sciences and has a regular contact with other academies and major research organizations. Being the only parliamentary office, it is also called more briefly “Parliamentary Office” or “Office”.

Christopher Weissberg is a French politician who served as a member of the National Assembly for the First French legislative constituency for citizens abroad, which covers North America, from 2022 to 2024. As the substitute of Roland Lescure, he replaced him while he held positions in the Borne and Attal governments.

Information Systems and Digital Agency is a social and scientific public institution in Benin. It was created by Decree No. 2022-324 of June 1, 2022, merging the Digital Development Agency, the Information Services and Systems Agency, the National Agency for Information Systems Security, and the Beninese Agency for the Universal Service of Electronic Communications and Post. The Agency operates under the dual supervision of the Ministry for the Digital Economy and Digitization and the Ministry of Economy and Finance of Benin. The head of ASIN is Marc André Loko, who is the director general and chairman of the Board of Directors of the Société Béninoise d’Infrastructures Numériques (SBIN).

Stormshield is a French publisher of softwares specialized in computer security, formed in 2013 from the acquisition and merger by Airbus CyberSecurity of Arkoon Network Security and NetASQ. The company, headed by Pierre-Yves Hentzen, sells firewall solutions for network protection, encryption for data security and local security for workstations. Its technologies have been approved by the ANSSI, the European Union and NATO. Stormshield, which employs around 400 people, also participates in government and academic cybersecurity training and awareness programs.

References

  1. "Homepage".
  2. Décret n° 2009-834 du 7 juillet 2009 portant création d'un service à compétence nationale dénommé « Agence nationale de la sécurité des systèmes d'information »(in French)
  3. "Guillaume Poupard prend la tête de l'Anssi" (in French). Archived from the original on 28 March 2014. Retrieved 28 March 2014.
  4. Décret du 27 mars 2014 portant nomination du directeur général de l'Agence nationale de la sécurité des systèmes d'information - M. POUPARD (Guillaume)(in French)
  5. Décret du 4 janvier 2023 pportant nomination du directeur général de l'Agence nationale de la sécurité des systèmes d'information - M. STRUBEL (Vincent)(in French)
  6. Question no 29424 de M. Julien Aubert sur les moyens publics alloués à la cyberdéfense, National Assembly, Réponse publiée le : 24/09/2013.
  7. Historique de l'ANSSI Archived October 30, 2014, at the Wayback Machine (in French)
  8. Présentation des missions sur le site de l'ANSSI ssi.gouv.fr (in French)
  9. Présentation de la sous-direction SDE sur le site de l'ANSSI ssi.gouv.fr (in French)
  10. Présentation de la sous-direction SIS sur le site de l'ANSSI ssi.gouv.fr (in French)
  11. Présentation de la sous-direction RELEC sur le site de l'ANSSI ssi.gouv.fr (in French)
  12. Présentation de la sous-direction SDAG sur le site de l'ANSSI ssi.gouv.fr (in French)
  13. Présentation du CFSSI sur le site de l'ANSSI ssi.gouv.fr Archived July 18, 2015, at the Wayback Machine (in French)
  14. Comité stratégique de la SSI sur le site de l'ANSSI ssi.gouv.fr Archived October 1, 2015, at the Wayback Machine (in French)
  15. "La cyberdéfense : un enjeu mondial, une priorité nationale". Sénat. 3 April 2023. Retrieved 22 April 2023.
  16. "Rapport Annuel 2015" (PDF). ssi.gouv.fr (in French). September 2016. Retrieved 22 April 2023.
  17. "Rapport Annuel 2016" (PDF). ssi.gouv.fr (in French). September 2016. Retrieved 22 April 2023.
  18. "Rapport Annuel 2017" (PDF). ssi.gouv.fr (in French). April 2018. Retrieved 22 April 2023.
  19. 1 2 "L'ANSSI recrute".
  20. "Papiers numériques" (PDF). cyber.gouv.fr (in French). 2020. Retrieved 3 December 2023.
  21. "Rapport d'activité 2020" (PDF). cyber.gouv.fr (in French). 2021. Retrieved 3 December 2023.
  22. "Rapport d'activité 2021" (PDF). cyber.gouv.fr (in French). 2022. Retrieved 3 December 2023.
  23. 1 2 "Contrôle budgétaire : Agence nationale de la sécurité des systèmes d'information anssi – communication – Intervention le 18 avril 2018". 28 April 2018.
  24. "Papiers numériques" (PDF). cyber.gouv.fr (in French). 2021. Retrieved 3 December 2023.
  25. "Rapport d'activité 2022" (PDF). cyber.gouv.fr (in French). April 2023. Retrieved 3 December 2023.
  26. "Les coulisses du piratage des « MacronLeaks". Le Monde.fr (in French). 15 June 2019. Retrieved 30 April 2021.
  27. "Communiqué de presse - En Marche a été victime d'une action de piratage massive et coordonnée". La République En Marche ! (in French). 5 May 2017. Retrieved 11 September 2020.
  28. "French cybersecurity agency to probe Macron hacking attack". AP NEWS. 6 May 2017. Retrieved 30 April 2021.