ANSSI's Publications

Publish the11 March 2025 updated 11 March 2025

Cyber threat Overview 2021

In this Cyber threat overview, ANSSI looks back at the major trends that have marked the cyber landscape in 2020-2021 and proposes short-term prospects for change.

Publish the07 February 2025 updated 13 February 2025

Building trust in AI through a cyber risk-based approach

The international agencies and government authorities behind this document advocate for a risk-based approach to support trusted AI systems and for secure AI value chains, and call for the discussion to continue beyond the AI Summit, to equally address opportunities, risks and evolving cyber threat in the context of AI adoption.

Publish the31 January 2025 updated 16 April 2025

Relational databases

With this guide, ANSSI - the French Cybersecurity Agency – aims to help organizations achieve the secure implementation of relational databases (DB) through 10 key best practices.

Publish the28 January 2025 updated 13 February 2025

Data leak prevention

In eleven best practices, check out the French cybersecurity agency ANSSI's essential resources for protecting your organization against data leaks.

Publish the27 September 2024 updated 27 September 2024

Security recommendations for a generative AI system

The document aims to raise awareness among public authorities and private entites of the risks associated with generative AI, and to promote good practice in the implementation of this type of system.

Publish the26 September 2024 updated 09 April 2025

Virtualization

Virtualization infrastructures are a prime target for attackers seeking quick, widespread access to the data and applications hosted therein. However, a number of best practices can help to reduce the risks and consequences of a virtualized IS’s compromise.

Publish the26 September 2024 updated 09 April 2025

Secure implementation of CMS

This short format is intended to help achieve the secure deployment of Content Management Systems (CMS) when creating websites. Within this framework, ANSSI recommends ten key best practices.

Publish the26 September 2024 updated 09 April 2025

DevSecOps

The DevSecOps methodology aims to include security measures throughout the application development and production process. When using this approach, the following security best practices should be considered.

Publish the26 September 2024 updated 09 April 2025

Distributed Denial of Service (DDoS)

Distributed Denial of Service (DDoS) attacks are a threat to any organization owning an information system connected to the Internet. This short format outlines the existing solutions for anticipating and dealing with this cyber-attack.

Publish the04 September 2024 updated 05 September 2024

Recommendations on hosting sensitive information systems in the cloud

ANSSI’s recommendations are a decision-making tool to help entities considering cloud hosting for their sensitive information systems (IS).