Maîtrise du Risque Cyber et Assurance : Scénario cyber s’appliquant à la filière aéronautique
Cotelle, Philippe, Philippe Wolf, Bénédicte Suzan, Jean-Laurent Santoni, Laurence Lemerle, Christophe Delcamp, Virginie Wyka, Sébastien Héon · HAL (Le Centre pour la Communication Scientifique Directe) · 2019
As part of its EIC (Environment for Interoperability and Integration in Cybersecurity) project, IRT SystemX is conducting research on cyber risk management in a multidisciplinary approach that combines mathematical and computer sciences with economic, social and behavioural sciences.Under the leadership of the Chief Security Officer of AIRBUS and the Director General of ANSSI (Agence nationale de la sécurité des systèmes d'information), IRT SystemX has been leading a working group since November 2015 on "Managing cyber risk throughout the value chain and its transfer to insurance". It brings together insurance and reinsurance specialists, brokers, lawyers, actuaries, industrialists (Insurance Risk Managers), OECD experts, under the aegis of the Fédération Française de l'Assurance (FFA), the Association française des professionnels de la réassurance en France (APREF), the Association française des professionnels de la gestion des risques et des assurances (AMRAE) and The Federation of European Risk Management Associations (FERMA).The reflections of year 3 focused on the design and implementation of a cyber exercise applicable to the aeronautics sector according to an approach similar to that developed by the University of Cambridge or national and international cyber exercises (Piranet, Cyber Europe, Cyber Storm...). The objective was to reflect on the concept of Extended Enterprise and to question the fact that today, an organization must be able to assess cyber risk along its value chain and supply chain for which raising the level of maturity in cyber security is a strategic issue.