Actu
The French Network and Information Security Agency (FNISA), Agence Nationale de la Sécurité des Systèmes d’Information (ANSSI)
July 2009 by Marc Jacob
The French White Paper on Defence and National Security, published on June 17th, 2008, has
identified cyber attacks as one of the main threats to the national territory. Indeed, society’s
growing dependence on information and communication technologies has made prevention and
reaction to cyber attacks a major priority in the organisation of national security. This necessity has
been underlined by several reports, notably those written by Deputy Pierre LASBORDES and by
Senator Roger ROMANI.
In order to strengthen France’s capabilities to face the challenges posed by information system
security, the White Paper on Defence and National Security has planned the creation of a French
Network and Information Security Agency (FNISA or ANSSI in French, standing for “Agence
Nationale de la Sécurité des Systèmes d’Information”), in a similar way to France’s main partner
nations. This new agency is placed under the authority of the Prime Minister and is attached to the
Secretary General for National Defence.
One year after the publication of the French White Paper, the ANSSI is now established by a decree
issued in the Journal Officiel de la République Française of July 8th, 2009 — the creation process
being under way since January 1st, 2009. The agency replaces the present Central Directorate for
Information System Security (DCSSI), and is assigned wider missions and resources.
The creation of the French Network and Information Security Agency is a milestone in the process
of improving France’s capability to protect its sensitive information systems.
The core missions of the new agency are:
· To detect and early react to cyber attacks, thanks to the creation of a strong operational
center for cyber defence, working round-the-clock and being in charge of the continuous
surveillance of sensitive Governmental networks, as well as the implementation of
appropriate defence mechanisms;
· To prevent threats by supporting the development of trusted products and services for
Governmental entities and economic actors;
· To provide reliable advice and support to Governmental entities and operators of Critical
Infrastructure;
· To keep companies and the general public informed about information security threats and
the related means of protection through an active communication policy.
