3. Risk governance and EBIOS RM 2024 (v 1.5)

Reality on the ground confirms the idea that the excessive complexity of our information assets makes it easier for attackers to exploit new forms of vulnerability. All studies and statistics show that the increased complexity of our information systems makes it harder to implement security measures to protect ourselves. In our Security Operations Center, we discover new forms of attack and threats every day. Unfortunately, they also show us that we are a long way from achieving excellence in cyber security. The need to assess and manage risks even better is therefore an absolute necessity. To achieve this, we need to be able to rely on recognized standards and, above all, approved methods. These activities must be methodical, tried and tested, and adapted to specific needs and complexities, as well as to regulatory requirements.

• Several...