[{"data":1,"prerenderedAt":190},["ShallowReactive",2],{"topics":3},[4,53,88,122,156],{"id":5,"title":6,"body":7,"description":40,"extension":41,"meta":42,"navigation":43,"order":44,"path":45,"repo":46,"seo":47,"slug":48,"status":49,"stem":50,"tags":51,"topic":46,"__hash__":52},"topics\u002Ftopics\u002Fgrc.md","GRC & Cyber Risk",{"type":8,"value":9,"toc":33},"minimark",[10,15,19,23,26,30],[11,12,14],"h2",{"id":13},"définition","Définition",[16,17,18],"p",{},"La gouvernance, le risque et la conformité organisent la manière dont une organisation décide, finance et vérifie sa sécurité.",[11,20,22],{"id":21},"enjeux","Enjeux",[16,24,25],{},"Le principal défi est de préserver le lien entre les risques métier, les contrôles réellement opérés et les preuves disponibles.",[11,27,29],{"id":28},"travaux-associés","Travaux associés",[16,31,32],{},"Les analyses couvrent notamment EBIOS RM, ISO 27001, NIST CSF, DORA, la mesure du risque et la conception d’indicateurs utiles.",{"title":34,"searchDepth":35,"depth":35,"links":36},"",2,[37,38,39],{"id":13,"depth":35,"text":14},{"id":21,"depth":35,"text":22},{"id":28,"depth":35,"text":29},"Transformer les exigences, les scénarios de risque et les signaux techniques en décisions de sécurité traçables.","md",{},true,1,"\u002Ftopics\u002Fgrc",null,{"title":6,"description":40},"grc","published","topics\u002Fgrc",[],"KqdpxRPpI7cR6OG1yakEg-BmvMfatB5M-KZv614iyE0",{"id":54,"title":55,"body":56,"description":80,"extension":41,"meta":81,"navigation":43,"order":35,"path":82,"repo":46,"seo":83,"slug":84,"status":49,"stem":85,"tags":86,"topic":46,"__hash__":87},"topics\u002Ftopics\u002Fvulnerability-management.md","Vulnerability Management",{"type":8,"value":57,"toc":75},[58,60,63,67,70,72],[11,59,14],{"id":13},[16,61,62],{},"La gestion des vulnérabilités identifie, contextualise, priorise et suit les faiblesses qui exposent les actifs de l’organisation.",[11,64,66],{"id":65},"contexte","Contexte",[16,68,69],{},"Le volume de CVE interdit une approche fondée sur la seule sévérité. CVSS, EPSS, CISA KEV et contexte d’actif doivent alimenter une décision cohérente.",[11,71,22],{"id":21},[16,73,74],{},"La qualité de l’inventaire, les faux positifs, les exceptions et la gouvernance de remédiation déterminent la valeur réelle du programme.",{"title":34,"searchDepth":35,"depth":35,"links":76},[77,78,79],{"id":13,"depth":35,"text":14},{"id":65,"depth":35,"text":66},{"id":21,"depth":35,"text":22},"Prioriser et gouverner la remédiation selon la menace, l’exposition, la criticité des actifs et la qualité des données.",{},"\u002Ftopics\u002Fvulnerability-management",{"title":55,"description":80},"vulnerability-management","topics\u002Fvulnerability-management",[],"r-HaHkRcUGeGW6L6qGmfJoAZTMGBnEvtcu0ncyUR-7M",{"id":89,"title":90,"body":91,"description":113,"extension":41,"meta":114,"navigation":43,"order":115,"path":116,"repo":46,"seo":117,"slug":118,"status":49,"stem":119,"tags":120,"topic":46,"__hash__":121},"topics\u002Ftopics\u002Fsecurity-automation.md","Security Automation",{"type":8,"value":92,"toc":108},[93,95,98,100,103,105],[11,94,14],{"id":13},[16,96,97],{},"L’automatisation de sécurité applique des règles, enrichit les signaux et orchestre des actions répétables à partir de données fiables.",[11,99,22],{"id":21},[16,101,102],{},"Une automatisation mal contextualisée accélère aussi les erreurs. Les garde-fous, la traçabilité et la possibilité d’intervention humaine restent essentiels.",[11,104,29],{"id":28},[16,106,107],{},"Python, intégration d’API, normalisation des données, politiques en code et pipelines de preuves constituent le socle de ces travaux.",{"title":34,"searchDepth":35,"depth":35,"links":109},[110,111,112],{"id":13,"depth":35,"text":14},{"id":21,"depth":35,"text":22},{"id":28,"depth":35,"text":29},"Automatiser les contrôles et la production de preuves tout en conservant des décisions explicables et réversibles.",{},3,"\u002Ftopics\u002Fsecurity-automation",{"title":90,"description":113},"security-automation","topics\u002Fsecurity-automation",[],"QWAkdPwZm1zUbuubZgpJURtpdu2lURxPHu3vRWWnIc0",{"id":123,"title":124,"body":125,"description":147,"extension":41,"meta":148,"navigation":43,"order":149,"path":150,"repo":46,"seo":151,"slug":152,"status":49,"stem":153,"tags":154,"topic":46,"__hash__":155},"topics\u002Ftopics\u002Fcloud-security.md","Cloud Security",{"type":8,"value":126,"toc":142},[127,129,132,134,137,139],[11,128,14],{"id":13},[16,130,131],{},"La sécurité cloud combine architecture, identité, configuration, observabilité et gouvernance dans des environnements qui évoluent en continu.",[11,133,22],{"id":21},[16,135,136],{},"Les contrôles doivent être testables, proches du cycle de livraison et compréhensibles par les équipes qui opèrent les plateformes.",[11,138,29],{"id":28},[16,140,141],{},"Azure, Entra ID, politiques en code, posture de sécurité, chemins d’attaque et preuves automatisées structurent ce domaine.",{"title":34,"searchDepth":35,"depth":35,"links":143},[144,145,146],{"id":13,"depth":35,"text":14},{"id":21,"depth":35,"text":22},{"id":28,"depth":35,"text":29},"Concevoir des garde-fous cloud mesurables, compatibles avec la vitesse des équipes et ancrés dans les scénarios de risque.",{},4,"\u002Ftopics\u002Fcloud-security",{"title":124,"description":147},"cloud-security","topics\u002Fcloud-security",[],"ikr0FBzaXszF7MYR4TOi_Ds1x7epEnPEggvzZOkd2RY",{"id":157,"title":158,"body":159,"description":181,"extension":41,"meta":182,"navigation":43,"order":183,"path":184,"repo":46,"seo":185,"slug":186,"status":49,"stem":187,"tags":188,"topic":46,"__hash__":189},"topics\u002Ftopics\u002Fai-security.md","AI Security",{"type":8,"value":160,"toc":176},[161,163,166,168,171,173],[11,162,14],{"id":13},[16,164,165],{},"La sécurité de l’IA couvre les systèmes qui utilisent des modèles, les données qui les alimentent et les décisions qu’ils influencent.",[11,167,22],{"id":21},[16,169,170],{},"Prompt injection, fuite de données, chaîne d’approvisionnement, contrôle des outils et évaluation continue nécessitent une approche expérimentale.",[11,172,29],{"id":28},[16,174,175],{},"NIST AI RMF, OWASP LLM, MITRE ATLAS, sécurité des agents et évaluation des applications RAG forment le cadre principal.",{"title":34,"searchDepth":35,"depth":35,"links":177},[178,179,180],{"id":13,"depth":35,"text":14},{"id":21,"depth":35,"text":22},{"id":28,"depth":35,"text":29},"Évaluer les risques propres aux systèmes d’IA et aux applications LLM sans oublier leur architecture logicielle classique.",{},5,"\u002Ftopics\u002Fai-security",{"title":158,"description":181},"ai-security","topics\u002Fai-security",[],"qvoRf4g8vGUfylekTPr_vSWestoXP88auRnG953NrC8",1789036874152]