Conclusion

Setting up a ZRR for an establishment is a complex organization, with a major stake in protecting the nation's scientific heritage, but also with financial and image implications for the laboratory.

The use of vulnerability diagnosis tools enables us to approach malfunctions from the angle of identifying each problem and prioritizing risk reduction actions (prevention and protection) to obtain an objective and operational consolidation of the system to be put in place.

Contrary to what is generally asserted by senior security and defense officials, the implementation of ZRRs brings at best only a modest improvement in PPST for a public research laboratory, at a cost that is far from zero and often borne by the entity. Its effectiveness remains to be demonstrated, not least by taking into account the accelerating digitalization of the research...