ANSSI's Publications

Backups are an essential part of a resilient cybersecurity system. Taking them into account is crucial to building and protecting an information system, but also to anticipating and reacting in crisis situations.

The C language offers great freedom to developers. Nevertheless, it comes with ambiguous or risky constructions that foster programming errors. The language standard does not specify all desired behaviors, and some remain therefore undefined or unspecified.

The Zero Trust model is increasingly appealing as it is promoted as a guarantee of secure access to IT resources in mixed usage contexts (remote working, BYOD) and is generating enthusiasm from technological and security solution providers who see the prospect of new gains.

This document is an update of ANSSI’s position on the post-quantum cryptography transition in view of the recent advances in the topic. It should be read as an addendum to 2022’s publication [1].

Cyber crises are becoming more and more common for public and private entities. To help build capacity in the face of this growing threat, ANSSI, in partnership with the Club des directeurs de sécurité et de sûreté des entreprises (CDSE), has published a guide on cyber crisis management. In addition to the best practices suggested to strategic and operational actors involved in the cyber crisis ma

The interministerial instruction n° 901/SGDSN/ANSSI (II 901) of 28 January 2015 defines the objectives and minimum security measures for the protection of sensitive information, and in particular information at Restricted Distribution (RD) level. This guide gives recommendations for the design of information systems (IS) which host sensitive or RD informations. I gives technical advices to transla

There is an unprecedented increase in ransomware attacks. Faced with this situation, ANSSI, in partnership with the Directorate of Criminal Affairs and Pardons (DACG) of the Ministry of Justice, has published the awareness guide Ransomware attacks, all concerned - How to prevent them and respond to an incident. The M6 Group, Rouen University Hospital Centre and Fleury Michon, all three victims of

The purpose of this guide is to provide step-by-step support to organisations in setting up a cyber crisis management exercise that is credible and will serve as training, for both players and organisers.