This is the end of the parliamentary marathon for Anssi. After the conclusion of the work of the joint joint commission, where the deputies and senators brought their final touch to the military programming law, this text has just been adopted Thursday by Parliament. Intended to set the guidelines for defense policy, it will also strengthen the powers of the cybersecurity agency headed by Vincent Strubel.
muscle powers
Concretely, four articles of the bill will make it possible to strengthen the powers of the cyber-firefighter of the State. The agency will thus be able to prescribe domain name filtering measures to neutralize computer attacks (article 32). It may also obtain the communication “of certain technical cache data of domain name system servers” (article 33).
The administration must also be informed in the event of an incident with a software publisher or the discovery of a critical vulnerability in one of its products (article 34). Finally, the bill was an opportunity to review the provisions relating to probes and the search for technical markers, measures introduced in the previous military programming law (article 35).
Concerns
So many measures that had raised the concerns of the opposition in the National Assembly. Deputies had considered that some of the provisions could constitute invasions of privacy or that they brought Anssi closer to the intelligence services. A measure introduced by the senators should make it possible to respond in part to these fears. They have indeed obtained the delivery of an annual activity report from Anssi on the filtering measures aimed at neutralizing attacks.
The Upper House had also asked to match the publication of the implementing decrees with an opinion from the National Commission for the Control of Intelligence Techniques (CNCTR). This provision did not survive the joint joint committee, unlike the abolition of the obligation of judicial swearing in of Anssi agents, which was left behind in the Assembly and restored in the Senate.