5. Conclusion

Although often disparaged for its complexity of implementation in its previous version, we believe that EBIOS RM 2024 is a formidable toolbox that facilitates the management of numerous risk categories and typologies. It enables us to anticipate dreaded events linked to an intensification of cyber-attacks, and is fully compatible with security standards, regulations and reference frameworks:

• DORA (Digital Operational Resilience Act) regulation;

• NIS2 (Network and Information Security) directive ;

• ISO/IEC 27005:2022 for information security risk management ;

• ISO/IEC 27001:2022 for the implementation of an information security management system (ISMS);

• ISO/IEC 31000:2018 for risk management.

...