6. Glossary

Active Directory

The directory of all IS identities – is the backbone of the system, making it an attacker's prime target. By compromising it, an attacker can usurp the identity of the highest-ranking administrators, obtain the keys to the information system and carry out any action he wishes.

ANSSI

French information systems security agency.

Digital risk management framework

The digital risk management framework is a formalized policy defining acceptable and unacceptable data security risks. This may involve strictly controlling the transfer of information outside the company, prohibiting "shadow IT" practices, or defining an alert channel in the event of a risk limit being crossed (significant data loss, inappropriate user behavior, exposure...