4. Implementation

4.1 Workshop 1: "Framework and safety foundation

According to ANSSI, page 8 – "Une démarche interactive en 5 ateliers" of the document "EBIOS RM" (2024): "The first workshop aims to identify the object of the study, the workshop participants and the time frame. During this workshop, you list the missions, business values and support assets relating to the object under study. You identify the feared events associated with the business values and estimate the severity of their impact. You will also assess compliance with the security foundation.

For its part, ISO/IEC 27005:2022, Chapter 7 Setting the context, page 6, states: "The external and internal context of information security risk management must be established, which implies determining the basic criteria...