{"id":2425,"date":"2025-12-11T14:07:48","date_gmt":"2025-12-11T13:07:48","guid":{"rendered":"https:\/\/www.syredis.fr\/?page_id=2425"},"modified":"2025-12-11T14:08:08","modified_gmt":"2025-12-11T13:08:08","slug":"2425-2","status":"publish","type":"page","link":"https:\/\/www.syredis.fr\/?page_id=2425&lang=en","title":{"rendered":"Security_System_Eng"},"content":{"rendered":"

\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t<\/span>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t
\n\t\t\t\t\t\t

Protecting Public Services<\/span><\/h1>\n\t\t\t\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t

A comprehensive operational framework to strengthen the security of local authorities\u2019 information systems, integrating governance, priority measures, business continuity, and effective crisis management.<\/p><\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>

\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t

Main Risks for Local Authorities<\/p><\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>

\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t
\n\t\t\t\t\t\t

Threats<\/span><\/h4>\n\t\t\t\t\t\t
    \n
  • \n
      \n
    • \n

      Ransomware:<\/strong> data encryption, service interruption (civil registry, school meals, payment office).<\/p>\n<\/li>\n

    • \n

      Phishing:<\/strong> credential theft, wire fraud.<\/p>\n<\/li>\n

    • \n

      Exposure of public-facing tools:<\/strong> misconfigured RDP\/VPN, unpatched CMS.<\/p>\n<\/li>\n

    • \n

      Data leaks:<\/strong> sharing errors, lost devices, uncontrolled cloud services.<\/p>\n<\/li>\n

    • \n

      OT \/ Connected urban systems:<\/strong> cameras, access control, signage, smart buildings.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>

      \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
      \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
      \n\t\t\t\t\t\n\t\t\t\t\t
      \n\t\t\t\t\t\t

      Summary<\/span><\/h4>\n\t\t\t\t\t\t
        \n
      • \n
          \n
        • \n

          Multi-factor authentication (MFA) for email, VPN, and line-of-business systems<\/p>\n<\/li>\n

        • \n

          3-2-1 backups, tested and offline<\/p>\n<\/li>\n

        • \n

          Updates and patches within 14\/30 days depending on severity<\/p>\n<\/li>\n

        • \n

          Network segmentation (users \/ servers \/ OT \/ guest Wi-Fi)<\/p>\n<\/li>\n

        • \n

          Email filtering + anti-phishing training<\/p>\n<\/li>\n

        • \n

          Centralized logging + monitoring (SIEM\/EDR\/antivirus)<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>

          \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
          \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
          \n\t\t\t\t\t\n\t\t\t\t\t
          \n\t\t\t\t\t\t

          Objectives<\/span><\/h4>\n\t\t\t\t\t\t
            \n
          • \n
              \n
            • \n

              Protect the confidentiality of administrative data<\/p>\n<\/li>\n

            • \n

              Ensure confidentiality for both staff and citizens<\/p>\n<\/li>\n

            • \n

              Strengthen access and action traceability<\/p>\n<\/li>\n

            • \n

              Prevent unauthorized alteration or manipulation of data<\/p>\n<\/li>\n

            • \n

              Ensure traceability and compliance (GDPR, audit logs)<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>

              \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
              \n\t\t\t\t
              \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
              \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t

              12 Priority Actions<\/h3>\n
                \n
              1. \n
                  \n
                1. Generalized MFA<\/strong>, including email, VPN, admin access, and business apps<\/li>\n
                2. 3-2-1 backup strategy<\/strong>: three copies, two media types, one offline or immutable + quarterly restoration tests<\/li>\n
                3. Structured patch management<\/strong>, based on updated inventory, CVSS prioritization, and phased rollout<\/li>\n
                4. Hardening of workstations and servers<\/strong>, disabling macros, enabling local firewall, and application control<\/li>\n
                5. Network segmentation<\/strong>, VLANs per usage, inter-zone filtering, isolated guest Wi-Fi<\/li>\n
                6. Supervised EDR\/antivirus<\/strong>, with detection, analysis, and quarantine<\/li>\n
                7. Mail & web filtering<\/strong>, sandboxing, DMARC\/DKIM\/SPF, blocking recent\/suspect domains<\/li>\n
                8. Identity management with least privilege<\/strong>, named accounts, and automatic revocation<\/li>\n
                9. Centralized logging<\/strong> (syslog\/SIEM), NTP timestamping, retention \u2265 6 months<\/li>\n
                10. Business continuity<\/strong>, with BCP\/DRP, critical service prioritization (civil registry, payroll, school meals\u2026), and regular tests<\/li>\n
                11. Ongoing awareness training<\/strong>, micro-learning and phishing simulations<\/li>\n
                12. Supplier management<\/strong>, including monitoring, controls, and security obligations<\/li>\n<\/ol>\n<\/li>\n<\/ol><\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>
                  \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                  \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t

                  Modes & Policies<\/p><\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>

                  \n\t\t\t\t
                  \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                  \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                  \n\t\t\t\t\t\n\t\t\t\t\t
                  \n\t\t\t\t\t\t

                  Information Security Policy (ISSP\/PSSI)<\/span><\/h4>\n\t\t\t\t\t\t

                  Provides a clear framework covering governance (elected official, IT dept, CISO), data classification, access rules, backup practices, incident management, and requirements applied to service providers.<\/p><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>

                  \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                  \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                  \n\t\t\t\t\t\n\t\t\t\t\t
                  \n\t\t\t\t\t\t

                  Charters & Procedures<\/span><\/h4>\n\t\t\t\t\t\t
                    \n
                  • \n
                      \n
                    • \n

                      User \/ administrator charter<\/p>\n<\/li>\n

                    • \n

                      Access rights procedure & periodic review<\/p>\n<\/li>\n

                    • \n

                      Password \/ MFA policy<\/p>\n<\/li>\n

                    • \n

                      Backup & restoration procedure<\/p>\n<\/li>\n

                    • \n

                      Incident Response Plan (IRP)<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>

                      \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                      \n\t\t\t\t
                      \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                      \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t

                      Incident Response<\/p><\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>

                      \n\t\t\t\t
                      \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                      \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                        \n
                      • \n
                          \n
                        • \n
                            \n
                          • Detect:<\/strong> EDR\/antivirus alerts, SIEM, user reports<\/li>\n
                          • Qualify:<\/strong> type (malware, leak, fraud), scope, criticality (impact on services\/citizens)<\/li>\n
                          • Contain:<\/strong> isolate devices\/servers, disable compromised accounts, block IOCs<\/li>\n
                          • Eradicate:<\/strong> remove root cause (malware, accounts), fix vulnerabilities<\/li>\n
                          • Recover:<\/strong> restore from clean backups, test, phased return to service<\/li>\n
                          • Communicate:<\/strong> crisis unit (official, CEO, IT, comms), inform citizens if required<\/li>\n
                          • Notify:<\/strong> regulatory reporting (e.g., CNIL for personal data)<\/li>\n
                          • Post-incident review:<\/strong> lessons learned, action plan<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul><\/div>\n\t\t\t<\/div>
                            \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t

                            Compliance<\/p><\/div>\n\t\t\t<\/div>

                            \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                              \n
                            • \n
                                \n
                              • \n
                                  \n
                                • Data protection:<\/strong> processing register, minimization, legal basis, DPIA if needed, citizen information<\/li>\n
                                • Log management:<\/strong> proportionality, purposes, appropriate retention periods<\/li>\n
                                • Public procurement:<\/strong> security requirements in contracts (SLA, incident reporting, encryption, reversibility)<\/li>\n
                                • Administrator access:<\/strong> traceability, named accounts, strong access control<\/li>\n
                                • Archiving:<\/strong> integrity, long-term preservation, document lifecycle<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n

                                   <\/p><\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div><\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"class_list":["post-2425","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.syredis.fr\/index.php?rest_route=\/wp\/v2\/pages\/2425","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.syredis.fr\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.syredis.fr\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.syredis.fr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.syredis.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2425"}],"version-history":[{"count":3,"href":"https:\/\/www.syredis.fr\/index.php?rest_route=\/wp\/v2\/pages\/2425\/revisions"}],"predecessor-version":[{"id":2428,"href":"https:\/\/www.syredis.fr\/index.php?rest_route=\/wp\/v2\/pages\/2425\/revisions\/2428"}],"wp:attachment":[{"href":"https:\/\/www.syredis.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2425"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}