Several regional centers will be created and distributed throughout France. Their goal: to provide assistance and advice directly in the region to businesses and communities, in the event of a computer attack.
The National Information Systems Security Agency (ANSSI) announced on Tuesday that it had signed an agreement for the creation of regional cyber incident response centers, called CSIRT, to Computer Security Incident Response Team. They will be active from next month and will be installed in Bourgogne Franche-Comté, Provence-Alpes-Côte d’Azur, Corsica, Grand Est, Center-Val de Loire, Normandy and New Aquitaine.
A direct response and support to associations, businesses and communities in the face of attacks
The CSIRTs of these seven large regions will participate in the incubation program set up by ANSSI. This will allow an accelerated development of these regional centers, whose mission will be to support the economic and social fabric of each territory in the face of cyberthreats and in reaction to cyber attacks.
It is therefore, in the first place, to protect the economic and social activity of the territories against cyberattacks that the CSIRTs will be useful. Cyber threats affect all organizations, private and public, large and small. The explosion of ransomware is obviously not unrelated to this. Hence the interest of support at the regional level.
In detail, the CSIRTs will enable the regions to offer all the entities in the territory under the cyber threat (companies, associations, communities) a local incident response service, in addition to that offered by local service providers. The regional centers will provide a faster response, which will directly limit the social and economic impacts of computer attacks. Following an incident, the CSIRTs will put the victims in touch with the appropriate structures (police services; ANSSI qualified service provider; cybermalveillance.gouv.fr and others). Upstream, a whole lot of awareness-raising and training in good cyber practices will be carried out.
The goal: quickly open CSIRTs in all regions
For its part, ANSSI will provide these CSIRTs with financial support, by granting a subsidy of one million euros, allocated to each of the volunteer regions. A 4-month training program is also planned. ” Thanks to the incubation program, these regional CSIRTs will be able to offer personalized assistance very quickly to the care of victims, by supporting them from the declaration of the incident until the end of the remediation, and by providing them with support. directing towards the right providers and the right actions to take », Reacted Guillaume Poupard, Director General of ANSSI. The agency wants to help the CSIRTs get up and running quickly.
The candidate metropolitan regions will therefore integrate the incubation sessions created by ANSSI in 2022. The first seven, mentioned above in this article, will benefit from the program between next February and June. The idea is that all volunteer regions can have a center by the end of the year, to reach their full operational capacities by 2024.
Source: ANSSI
1