{"id":39905,"date":"2024-10-09T02:52:56","date_gmt":"2024-10-09T02:52:56","guid":{"rendered":"https:\/\/metachannelcorp.com\/en\/perspectives\/parallelisme-et-complementarite-entre-nis2-iso-iec-27001-et-nist-csf-2-0\/"},"modified":"2024-10-09T02:52:56","modified_gmt":"2024-10-09T02:52:56","slug":"parallelisme-et-complementarite-entre-nis2-iso-iec-27001-et-nist-csf-2-0","status":"publish","type":"post","link":"https:\/\/metachannelcorp.com\/fr\/perspectives\/parallelisme-et-complementarite-entre-nis2-iso-iec-27001-et-nist-csf-2-0\/","title":{"rendered":"Parall\u00e9lisme et compl\u00e9mentarit\u00e9 entre NIS2, ISO\/IEC 27001 et NIST CSF 2.0"},"content":{"rendered":"<p><span ><strong><a href=\"https:\/\/ceadigilaw.org\/staff\/antonio-tejeda-encinas-2\/\" target=\"_blank\" rel=\"noopener\"><span >Antonio Tejeda Encinas<\/span><\/a><\/strong> CEO de META Channel Corporation. Pr\u00e9sident de l&#8217;Euro-American Committee of Digital Law &#8211;<strong><a  href=\"https:\/\/ceadigilaw.org\" target=\"_blank\" rel=\"noopener\">CEA Digital Law<\/a><\/strong>.<\/span><\/p>\n<p><span ><br \/>\nNE CONFONDONS PAS\u202f!<\/span><br \/>\n<span ><br \/>\nParall\u00e9lisme et compl\u00e9mentarit\u00e9 entre NIS2, ISO\/IEC 27001 et NIST CSF 2.0\u202f: un cadre global pour la cybers\u00e9curit\u00e9 en Europe\u00a0<\/span><\/p>\n<p><span ><br \/>\nFace \u00e0 l&#8217;importance croissante de la cybers\u00e9curit\u00e9 en Europe, il est essentiel de comprendre les diff\u00e9rences et les compl\u00e9mentarit\u00e9s entre ces trois cadres\u202f:<\/span><\/p>\n<p><span >\u00a0 <strong><br \/>\nNIS2 (directive europ\u00e9enne sur la s\u00e9curit\u00e9 des r\u00e9seaux et des syst\u00e8mes d&#8217;information)<\/strong><\/span><\/p>\n<p><span ><br \/>\n&#8211; <strong>Nature\u202f:<\/strong> Directive juridique et normative de l&#8217;Union europ\u00e9enne.<\/span><\/p>\n<p><span ><br \/>\n\u00a0&#8211; <strong>Objectif\u202f:<\/strong> Garantir un niveau minimal de cybers\u00e9curit\u00e9 dans les infrastructures critiques et les secteurs essentiels (\u00e9nergie, sant\u00e9, transports, etc.).<\/span><\/p>\n<p><span >\u00a0<br \/>\n&#8211; <strong>Caract\u00e8re obligatoire\u202f:<\/strong> Respect obligatoire pour tous les \u00c9tats membres et pour les entreprises des secteurs critiques.<\/span><\/p>\n<p><span ><br \/>\n&#8211; <strong>Champ\u202f:<\/strong> Protection de la s\u00e9curit\u00e9 des infrastructures essentielles et des services num\u00e9riques.<\/span><\/p>\n<p><span ><br \/>\n&#8211; <strong>Application\u202f:<\/strong> \u00c0 partir d&#8217;octobre 2024.<\/span><\/p>\n<p><span ><strong><br \/>\nISO\/IEC 27001 (syst\u00e8me de management de la s\u00e9curit\u00e9 de l&#8217;information)<\/strong><\/span><\/p>\n<p><span >\u00a0<br \/>\n&#8211; <strong>Nature\u202f:<\/strong> Norme internationale VOLONTAIRE.<\/span><\/p>\n<p><span ><br \/>\n&#8211; <strong>Objectif\u202f:<\/strong> Mettre en place un syst\u00e8me de management de la s\u00e9curit\u00e9 garantissant la confidentialit\u00e9, l&#8217;int\u00e9grit\u00e9 et la disponibilit\u00e9 de l&#8217;information.<\/span><\/p>\n<p><span ><br \/>\n&#8211;\u00a0 <strong>Caract\u00e8re obligatoire\u202f:<\/strong> Volontaire, fond\u00e9e sur la certification.<\/span><\/p>\n<p><span ><br \/>\n&#8211; <strong>Champ\u202f:<\/strong> Applicable \u00e0 tout type d&#8217;organisation souhaitant structurer sa s\u00e9curit\u00e9 en fonction de ses risques sp\u00e9cifiques.<\/span><\/p>\n<p><span ><br \/>\n&#8211; <strong>Application<\/strong>\u202f: derni\u00e8re mise \u00e0 jour en octobre 2022.<\/span><\/p>\n<p><strong><span ><br \/>\nNIST CSF 2.0 (cadre de cybers\u00e9curit\u00e9 du National Institute of Standards and Technology, Cybersecurity Framework)<\/span><\/strong><\/p>\n<p><span ><br \/>\n&#8211; <strong>Nature\u202f:<\/strong> Cadre de gestion de la cybers\u00e9curit\u00e9 \u00e9labor\u00e9 aux \u00c9tats-Unis.<\/span><\/p>\n<p><span ><br \/>\n&#8211; <strong>Objectif\u202f:<\/strong> Fournir de bonnes pratiques pour g\u00e9rer les risques et am\u00e9liorer la posture de s\u00e9curit\u00e9 des organisations.<\/span><\/p>\n<p><span ><br \/>\n&#8211; <strong>Caract\u00e8re obligatoire\u202f:<\/strong> Volontaire, adopt\u00e9 par de nombreuses entreprises comme r\u00e9f\u00e9rence.<\/span><\/p>\n<p><span ><strong><br \/>\n&#8211; Champ\u202f:<\/strong> Approche adaptable \u00e0 tout type d&#8217;organisation, des petites entreprises aux grands groupes.<\/span><\/p>\n<p><span ><br \/>\n&#8211; <strong>Application<\/strong>\u202f: projet de la version 2.0 pr\u00e9sent\u00e9 en octobre 2024.<\/span><\/p>\n<p><span ><strong><br \/>\nPourquoi est-ce important\u202f?<\/strong> \ud83d\udd0d\ud83d\udc47<\/span><br \/>\n<span ><br \/>\nBien que tous traitent de la cybers\u00e9curit\u00e9, NIS2 \u00e9tablit un cadre juridique obligatoire pour prot\u00e9ger les infrastructures critiques en Europe, tandis qu&#8217;ISO 27001 et NIST CSF 2.0 sont des r\u00e9f\u00e9rentiels volontaires qui permettent aux entreprises de structurer leur s\u00e9curit\u00e9 en fonction de leurs propres risques et objectifs.<\/span><\/p>\n<p><span ><br \/>\n\ud83d\udca1 Ensemble, ces cadres ne se substituent pas les uns aux autres\u202f: ils se compl\u00e8tent pour b\u00e2tir un environnement de cybers\u00e9curit\u00e9 global dans la r\u00e9gion.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Antonio Tejeda Encinas CEO de META Channel Corporation. Pr\u00e9sident de l&#8217;Euro-American Committee of Digital Law &#8211;CEA Digital Law. NE CONFONDONS PAS\u202f! Parall\u00e9lisme et compl\u00e9mentarit\u00e9 entre NIS2, ISO\/IEC 27001 et NIST CSF 2.0\u202f: un cadre global pour la cybers\u00e9curit\u00e9 en Europe\u00a0 Face \u00e0 l&#8217;importance croissante de la cybers\u00e9curit\u00e9 en Europe, il est essentiel de comprendre les [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":32803,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2439],"tags":[],"class_list":["post-39905","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurite-et-resilience-numerique"],"_links":{"self":[{"href":"https:\/\/metachannelcorp.com\/fr\/wp-json\/wp\/v2\/posts\/39905","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/metachannelcorp.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/metachannelcorp.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/metachannelcorp.com\/fr\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/metachannelcorp.com\/fr\/wp-json\/wp\/v2\/comments?post=39905"}],"version-history":[{"count":0,"href":"https:\/\/metachannelcorp.com\/fr\/wp-json\/wp\/v2\/posts\/39905\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/metachannelcorp.com\/fr\/wp-json\/wp\/v2\/media\/32803"}],"wp:attachment":[{"href":"https:\/\/metachannelcorp.com\/fr\/wp-json\/wp\/v2\/media?parent=39905"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/metachannelcorp.com\/fr\/wp-json\/wp\/v2\/categories?post=39905"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/metachannelcorp.com\/fr\/wp-json\/wp\/v2\/tags?post=39905"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}