{"id":142,"date":"2026-09-13T20:56:46","date_gmt":"2026-09-13T20:56:46","guid":{"rendered":"https:\/\/neranis.com\/?post_type=nrn_service&#038;p=142"},"modified":"2026-09-13T20:56:46","modified_gmt":"2026-09-13T20:56:46","slug":"administration-de-lia-et-evaluation-des-risques","status":"publish","type":"nrn_service","link":"https:\/\/neranis.com\/fr\/services\/ai-governance-and-risk-assessment\/","title":{"rendered":"Gouvernance de l'IA et \u00e9valuation des risques"},"content":{"rendered":"<section class=\"wp-block-group nrn2-section nrn2-page-hero is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-breadcrumb wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/\">Accueil<\/a> <span aria-hidden=\"true\">\/<\/span> <a href=\"https:\/\/neranis.com\/fr\/expertise\/\">Expertise<\/a> \/ <a href=\"https:\/\/neranis.com\/fr\/expertise\/ia-securisee\/\">IA s\u00e9curis\u00e9e<\/a><\/p>\n\n\n<div class=\"wp-block-group nrn2-service-top nrn2-hero-layout-r3 is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-hero-split-copy is-layout-flow wp-block-group-is-layout-flow\">\n\n<p class=\"nrn2-kicker wp-block-paragraph\">AI \/ AI-02<\/p>\n\n\n<h1 class=\"wp-block-heading nrn2-title\">Gouvernance de l'IA et \u00e9valuation des risques<\/h1>\n\n\n<p class=\"nrn2-lead wp-block-paragraph\">Identifier les utilisations, les propri\u00e9taires et les risques li\u00e9s \u00e0 l'IA afin de d\u00e9cider ce qui peut \u00eatre d\u00e9ploy\u00e9 et dans quelles conditions. Le programme associe qualit\u00e9, s\u00e9curit\u00e9, donn\u00e9es personnelles, supervision humaine et suivi des changements.<\/p>\n\n<\/div>\n\n\n<figure class=\"wp-block-image size-full nrn2-context-image nrn2-visual-asset-service-family-ai\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"500\" src=\"https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-ai.webp\" alt=\"\" class=\"wp-image-253\" srcset=\"https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-ai.webp 1600w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-ai-300x94.webp 300w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-ai-1024x320.webp 1024w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-ai-768x240.webp 768w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-ai-1536x480.webp 1536w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><\/figure>\n<\/div>\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-service-top is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-service-intro is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">QUAND C'EST UTILE<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Une r\u00e9ponse cibl\u00e9e<br>\u00e0 un besoin d\u00e9fini.<\/h2>\n\n\n<p class=\"nrn2-body-lg wp-block-paragraph\">Des projets de IA en pleine croissance, des demandes de r\u00e8gles de leadership, un traitement de donn\u00e9es sensibles ou encore un dossier d\u00e9cisionnel requis avant un d\u00e9ploiement g\u00e9n\u00e9ralis\u00e9.<\/p>\n\n\n<div class=\"wp-block-buttons nrn2-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/neranis.com\/fr\/contact\/\">Discutez de ce service<\/a><\/div>\n\n<\/div>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-facts is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">EN UN COUP D'\u0152IL<\/p>\n\n\n<p class=\"wp-block-paragraph\"><strong>Famille<\/strong><br><a href=\"https:\/\/neranis.com\/fr\/expertise\/ia-securisee\/\">IA s\u00e9curis\u00e9e<\/a><\/p>\n\n\n<p class=\"wp-block-paragraph\"><strong>Engagement<\/strong><br>Conseil et mise en \u0153uvre<\/p>\n\n\n<p class=\"wp-block-paragraph\"><strong>R\u00e9f\u00e9rence<\/strong><br>AI-02<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section nrn2-canvas is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">PORT\u00c9E ET R\u00c9SULTATS<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Ce que couvre la mission.<\/h2>\n\n<\/div>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-delivery-grid is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-delivery-card is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Port\u00e9e<\/h3>\n\n\n<ul class=\"wp-block-list nrn2-list\">\n<li>Inventaire<\/li>\n\n\n<li>Finalit\u00e9s<\/li>\n\n\n<li>Intervenants<\/li>\n\n\n<li>impacts<\/li>\n\n\n<li>fournisseurs<\/li>\n\n\n<li>fluxes<\/li>\n\n\n<li>risques<\/li>\n\n\n<li>Suveillance<\/li>\n\n\n<li>R\u00e8gles d\u2019utilisation<\/li>\n\n\n<li>crit\u00e8res d'acceptation<\/li>\n\n\n<li>Incidents<\/li>\n\n\n<li>modifications du mod\u00e8le et r\u00e9\u00e9valuation<\/li>\n\n<\/ul>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-delivery-card is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Livrables<\/h3>\n\n\n<ul class=\"wp-block-list nrn2-list\">\n<li>Registre des cas d'utilisation<\/li>\n\n\n<li>\u00e9valuation des risques<\/li>\n\n\n<li>Politique en mati\u00e8re d'IA<\/li>\n\n\n<li>matrice des responsabilit\u00e9s<\/li>\n\n\n<li>exigences<\/li>\n\n\n<li>Liste de contr\u00f4le d\u2019approbation<\/li>\n\n\n<li>plan de traitement<\/li>\n\n\n<li>contribution aux \u00e9valuations r\u00e9glementaires pertinentes<\/li>\n\n<\/ul>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-delivery-card nrn2-evidence is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Preuve de r\u00e9ception<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Les utilisations prioritaires sont enregistr\u00e9es ; les propri\u00e9taires et les crit\u00e8res d\u2019acceptation sont d\u00e9finis ; les risques r\u00e9siduels sont d\u00e9termin\u00e9s ; les processus de changement sont g\u00e9r\u00e9s ; l\u2019analyse juridique est assur\u00e9e par des parties comp\u00e9tentes.<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">LIVRAISON<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Comment le travail est structur\u00e9.<\/h2>\n\n<\/div>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-two-col is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-prose is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Approche<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Choisir un cas d'usage ; classifier les donn\u00e9es et l'acc\u00e8s ; concevoir et piloter ; tester la confidentialit\u00e9, les actions et le co\u00fbt ; d\u00e9cider du d\u00e9ploiement et du suivi.<\/p>\n\n\n<h3 class=\"wp-block-heading\">Pr\u00e9requis et responsabilit\u00e9s<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Client : sponsor m\u00e9tier, propri\u00e9taires des donn\u00e9es, \u00e9quipe d'identit\u00e9, DPO\/juridique si n\u00e9cessaire et budget. Fournisseur : architecture et tests ; le client conserve l'approbation des utilisations sensibles.<\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-prose is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Facteurs de port\u00e9e<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Usages, utilisateurs, mod\u00e8les, donn\u00e9es, connecteurs, autorisations, actions, volumes et h\u00e9bergement. Projet s\u00e9par\u00e9, licences, jetons, recherche, stockage et op\u00e9rations ; pas d'\u00e9conomies revendiqu\u00e9es sans mesure.<\/p>\n\n\n<h3 class=\"wp-block-heading\">Questions \u00e0 clarifier<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Qui d\u00e9cide de l\u2019utilisation acceptable ? Quels sont les erreurs qui pourraient avoir un impact significatif ? Quel r\u00f4le joue l\u2019organisation et quelles r\u00e8gles s\u2019appliquent r\u00e9ellement \u00e0 chaque cas d\u2019utilisation ?<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section nrn2-compact is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-boundaries is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">LIMITES IMPORTANTES<\/p>\n\n\n<p class=\"nrn2-body-lg wp-block-paragraph\">La classification r\u00e9glementaire, les obligations et le calendrier doivent \u00eatre v\u00e9rifi\u00e9s au cas par cas. Les cadres NIST\/OWASP ne sont pas des certifications juridiques de l\u2019utilisation des cas d\u2019application.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Les autorisations, l'utilisation des donn\u00e9es par le fournisseur, la conservation, la r\u00e9sidence et l'application des co\u00fbts sont \u00e9valu\u00e9es s\u00e9par\u00e9ment. Les fonctionnalit\u00e9s techniques et les obligations applicables sont v\u00e9rifi\u00e9es pour l'offre et le cas d'utilisation choisis.<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">EN PRATIQUE<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Situations illustratives.<\/h2>\n\n<\/div>\n\n\n<p class=\"nrn2-section-lead wp-block-paragraph\">Ces exemples d\u00e9crivent des engagements possibles et des r\u00e9sultats cibles. Il ne s'agit pas de r\u00e9f\u00e9rences clients ni de r\u00e9sultats obtenus.<\/p>\n\n<\/div>\n\n\n<details class=\"wp-block-details nrn2-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Sc\u00e9nario 01<\/summary>\n<p class=\"wp-block-paragraph\">Un groupe re\u00e7oit des demandes d\u2019IA de toutes les fonctions. Probl\u00e9matique : cr\u00e9er une liste de contr\u00f4le permettant de distinguer l\u2019assistance documentaire des d\u00e9cisions sensibles. Objectif : approbation proportionn\u00e9e, avec des essais pilotes limit\u00e9s pour les usages \u00e0 faible risque et un examen plus rigoureux pour les autres.<\/p>\n\n<\/details>\n\n\n<details class=\"wp-block-details nrn2-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Sc\u00e9nario 02<\/summary>\n<p class=\"wp-block-paragraph\">Une entreprise souhaite automatiser une d\u00e9cision qui affecte des personnes. Projet : \u00e9valuer les impacts et les exigences en consultation avec des juristes et le DPO. Objectif : une d\u00e9cision \u00e9clair\u00e9e concernant la poursuite, la refonte ou l\u2019arr\u00eat du projet, sans promettre la conformit\u00e9 gr\u00e2ce \u00e0 l\u2019achat d\u2019un outil.<\/p>\n\n<\/details>\n\n\n<details class=\"wp-block-details nrn2-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Contexte technologique et de r\u00e9f\u00e9rence<\/summary>\n<p class=\"wp-block-paragraph\">R\u00e9f\u00e9rences : Profil AI RMF\/GenAI de NIST, CNIL et OWASP GenAI ; outils de registre et de workflow adapt\u00e9s au client.<\/p>\n\n\n<p class=\"wp-block-paragraph\">L'ensemble final des technologies est convenu lors du cadrage, sur la base de l'interop\u00e9rabilit\u00e9, des licences, des droits d'acc\u00e8s et des exigences op\u00e9rationnelles.<\/p>\n\n<\/details>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">SERVICES CONNECT\u00c9S<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Construisez l'\u00e9tape suivante.<\/h2>\n\n<\/div>\n\n\n<p class=\"nrn2-section-lead wp-block-paragraph\">Ces services peuvent compl\u00e9ter la mission. Ils ne sont pas inclus automatiquement.<\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-related-grid is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-service-card is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-ref wp-block-paragraph\">AI-03<\/p>\n\n\n<h3 class=\"wp-block-heading\"><a href=\"https:\/\/neranis.com\/fr\/services\/assistant-de-documents-rag-sensible-aux-autorisations\/\">Assistant de documents RAG sensible aux autorisations<\/a><\/h3>\n\n\n<p class=\"nrn2-card-desc wp-block-paragraph\">Connecter un assistant \u00e0 des documents d'entreprise sans accorder plus de acc\u00e8s que l'utilisateur n'en poss\u00e8de. Le RAG r\u00e9cup\u00e8re les documents avant de g\u00e9n\u00e9rer une r\u00e9ponse ; les autorisations doivent \u00eatre appliqu\u00e9es avant que les donn\u00e9es interdites n'entrent dans le contexte du mod\u00e8le.<\/p>\n\n\n<p class=\"nrn2-text-link wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/services\/assistant-de-documents-rag-sensible-aux-autorisations\/\">D\u00e9couvrir ce service <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-service-card is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-ref wp-block-paragraph\">IA-04<\/p>\n\n\n<h3 class=\"wp-block-heading\"><a href=\"https:\/\/neranis.com\/fr\/services\/controles-des-couts-quotas-et-passerelle-dacces-pour-lia\/\">Contr\u00f4les des co\u00fbts, quotas et passerelle d'acc\u00e8s pour l'IA<\/a><\/h3>\n\n\n<p class=\"nrn2-card-desc wp-block-paragraph\">Rendre la consommation d'IA imputable et contr\u00f4lable par utilisateur, \u00e9quipe ou application. Le projet associe mesure, s\u00e9lection de mod\u00e8les, quotas, alertes et application test\u00e9e sans confondre les notifications de budget avec le blocage.<\/p>\n\n\n<p class=\"nrn2-text-link wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/services\/controles-des-couts-quotas-et-passerelle-dacces-pour-lia\/\">D\u00e9couvrir ce service <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-service-card is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-ref wp-block-paragraph\">AI-05<\/p>\n\n\n<h3 class=\"wp-block-heading\"><a href=\"https:\/\/neranis.com\/fr\/services\/test-et-validation-de-la-securite-du-systeme-ai\/\">Test et validation de la s\u00e9curit\u00e9 des syst\u00e8mes d'IA<\/a><\/h3>\n\n\n<p class=\"nrn2-card-desc wp-block-paragraph\">\u00c9valuer une application d'IA compl\u00e8te : mod\u00e8le, donn\u00e9es, connecteurs, politiques, outils et utilisateurs. Les tests examinent la fuite d'informations, les instructions malveillantes re\u00e7ues par le syst\u00e8me et les limites des actions possibles.<\/p>\n\n\n<p class=\"nrn2-text-link wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/services\/test-et-validation-de-la-securite-du-systeme-ai\/\">D\u00e9couvrir ce service <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-cta is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">Commencer une conversation<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Clarifiez la port\u00e9e.<\/h2>\n\n<\/div>\n\n\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-body-lg wp-block-paragraph\">Nous clarifierons l'objectif, les d\u00e9pendances et les responsabilit\u00e9s de ce service avant de proposer la livraison.<\/p>\n\n\n<div class=\"wp-block-buttons nrn2-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/neranis.com\/fr\/contact\/\">Discutez de vos priorit\u00e9s<\/a><\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>","protected":false},"excerpt":{"rendered":"<p>Identifier les utilisations, les propri\u00e9taires et les risques li\u00e9s \u00e0 l'IA afin de d\u00e9cider ce qui peut \u00eatre d\u00e9ploy\u00e9 et dans quelles conditions. Le programme associe qualit\u00e9, s\u00e9curit\u00e9, donn\u00e9es personnelles, supervision humaine et suivi des changements.<\/p>","protected":false},"featured_media":0,"template":"single-nrn_service","meta":{"footnotes":""},"nrn_family":[17],"class_list":["post-142","nrn_service","type-nrn_service","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service\/142","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service"}],"about":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/types\/nrn_service"}],"version-history":[{"count":2,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service\/142\/revisions"}],"predecessor-version":[{"id":537,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service\/142\/revisions\/537"}],"wp:attachment":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/media?parent=142"}],"wp:term":[{"taxonomy":"nrn_family","embeddable":true,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_family?post=142"}],"curies":[{"name":"Bien jou\u00e9","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}