{"id":68,"date":"2026-09-13T20:56:37","date_gmt":"2026-09-13T20:56:37","guid":{"rendered":"https:\/\/neranis.com\/?post_type=nrn_service&#038;p=68"},"modified":"2026-09-13T20:56:37","modified_gmt":"2026-09-13T20:56:37","slug":"evaluation-des-risques-par-le-responsable-des-risques-debios","status":"publish","type":"nrn_service","link":"https:\/\/neranis.com\/fr\/services\/ebios-risk-manager-risk-assessment\/","title":{"rendered":"\u00e9valuation des risques EBIOS Risk Manager"},"content":{"rendered":"<section class=\"wp-block-group nrn2-section nrn2-page-hero is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-breadcrumb wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/\">Accueil<\/a> <span aria-hidden=\"true\">\/<\/span> <a href=\"https:\/\/neranis.com\/fr\/expertise\/\">Expertise<\/a> \/ <a href=\"https:\/\/neranis.com\/fr\/expertise\/gouvernance-des-risques\/\">Risques et gouvernance<\/a><\/p>\n\n\n<div class=\"wp-block-group nrn2-service-top nrn2-hero-layout-r3 is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-hero-split-copy is-layout-flow wp-block-group-is-layout-flow\">\n\n<p class=\"nrn2-kicker wp-block-paragraph\">GRC \/ GRC-01<\/p>\n\n\n<h1 class=\"wp-block-heading nrn2-title\">\u00e9valuation des risques EBIOS Risk Manager<\/h1>\n\n\n<p class=\"nrn2-lead wp-block-paragraph\">Une m\u00e9thode structur\u00e9e reliant les objectifs commerciaux \u00e0 des sc\u00e9narios de cyber-risque et \u00e0 un plan de traitement d\u00e9cid\u00e9 par l'organisation.<\/p>\n\n<\/div>\n\n\n<figure class=\"wp-block-image size-full nrn2-context-image nrn2-visual-asset-service-family-grc\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"500\" src=\"https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-grc.webp\" alt=\"\" class=\"wp-image-241\" srcset=\"https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-grc.webp 1600w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-grc-300x94.webp 300w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-grc-1024x320.webp 1024w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-grc-768x240.webp 768w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-grc-1536x480.webp 1536w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><\/figure>\n<\/div>\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-service-top is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-service-intro is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">QUAND C'EST UTILE<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Une r\u00e9ponse cibl\u00e9e<br>\u00e0 un besoin d\u00e9fini.<\/h2>\n\n\n<p class=\"nrn2-body-lg wp-block-paragraph\">Responsables de l\u2019entreprise, responsables de la s\u00e9curit\u00e9 informatique (CISO) ou propri\u00e9taires d\u2019entreprise ; un nouveau service sensible, des d\u00e9cisions budg\u00e9taires ou la n\u00e9cessit\u00e9 de justifier les priorit\u00e9s en mati\u00e8re de s\u00e9curit\u00e9.<\/p>\n\n\n<div class=\"wp-block-buttons nrn2-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/neranis.com\/fr\/contact\/\">Discutez de ce service<\/a><\/div>\n\n<\/div>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-facts is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">EN UN COUP D'\u0152IL<\/p>\n\n\n<p class=\"wp-block-paragraph\"><strong>Famille<\/strong><br><a href=\"https:\/\/neranis.com\/fr\/expertise\/gouvernance-des-risques\/\">Risques et gouvernance<\/a><\/p>\n\n\n<p class=\"wp-block-paragraph\"><strong>Engagement<\/strong><br>Avis<\/p>\n\n\n<p class=\"wp-block-paragraph\"><strong>R\u00e9f\u00e9rence<\/strong><br>GRC-01<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section nrn2-canvas is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">PORT\u00c9E ET R\u00c9SULTATS<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Ce que couvre la mission.<\/h2>\n\n<\/div>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-delivery-grid is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-delivery-card is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Port\u00e9e<\/h3>\n\n\n<ul class=\"wp-block-list nrn2-list\">\n<li>Cinq ateliers : cadre d\u2019action et base de r\u00e9f\u00e9rence de s\u00e9curit\u00e9<\/li>\n\n\n<li>Origines du risque<\/li>\n\n\n<li>sc\u00e9narios strat\u00e9giques<\/li>\n\n\n<li>sc\u00e9narios op\u00e9rationnels<\/li>\n\n\n<li>Traitement et surveillance du risque r\u00e9siduel<\/li>\n\n<\/ul>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-delivery-card is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Livrables<\/h3>\n\n\n<ul class=\"wp-block-list nrn2-list\">\n<li>Fichier d\u2019\u00e9valuation<\/li>\n\n\n<li>sc\u00e9narios prioritaires<\/li>\n\n\n<li>plan de traitement avec les propri\u00e9taires et registre des risques r\u00e9siduels<\/li>\n\n<\/ul>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-delivery-card nrn2-evidence is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Preuve de r\u00e9ception<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Le cadre d\u2019action, les hypoth\u00e8ses, les sc\u00e9narios et les d\u00e9cisions de traitement sont approuv\u00e9s ; la responsabilit\u00e9 de l\u2019acceptation du risque revient au d\u00e9cideur autoris\u00e9.<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">LIVRAISON<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Comment le travail est structur\u00e9.<\/h2>\n\n<\/div>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-two-col is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-prose is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Approche<\/h3>\n\n\n<p class=\"wp-block-paragraph\">D\u00e9finir le contexte du p\u00e9rim\u00e8tre ; mobiliser les propri\u00e9taires d'entreprise et les d\u00e9cideurs ; \u00e9valuer les risques ou les lacunes ; d\u00e9cider des mesures de contr\u00f4le ; organiser le suivi et les justificatifs.<\/p>\n\n\n<h3 class=\"wp-block-heading\">Pr\u00e9requis et responsabilit\u00e9s<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Client : sponsor, dirigeants disponibles, d\u00e9cisions sur les risques et avis juridiques si n\u00e9cessaire. Prestataire : m\u00e9thodologie, animation, analyse et dossier de d\u00e9cision.<\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-prose is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Facteurs de port\u00e9e<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Entit\u00e9s, processus, parties prenantes, p\u00e9rim\u00e8tre r\u00e9glementaire, maturit\u00e9 des documents et ateliers. Projet, support ponctuel ou RSSI fractionn\u00e9 selon le besoin.<\/p>\n\n\n<h3 class=\"wp-block-heading\">Questions \u00e0 clarifier<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Quelle mission d\u2019entreprise n\u00e9cessite une protection ? Quels groupes d\u2019entrepreneurs participeront ? Qui assume les risques r\u00e9siduels et qui contr\u00f4le les fonds ?<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section nrn2-compact is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-boundaries is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">LIMITES IMPORTANTES<\/p>\n\n\n<p class=\"nrn2-body-lg wp-block-paragraph\">L\u2019analyse de sc\u00e9narios se concentre sur les menaces intentionnelles ; la base de r\u00e9f\u00e9rence en mati\u00e8re de s\u00e9curit\u00e9 reste essentielle. Il ne s\u2019agit ni d\u2019une analyse ni d\u2019un test de p\u00e9n\u00e9tration.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Le travail \u00e9taye les d\u00e9cisions et les \u00e9l\u00e9ments de preuve pour le cadre convenu. Les avis juridiques, la certification ind\u00e9pendante et les d\u00e9cisions des r\u00e9gulateurs ou des \u00e9valuateurs demeurent des responsabilit\u00e9s distinctes.<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">EN PRATIQUE<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Situations illustratives.<\/h2>\n\n<\/div>\n\n\n<p class=\"nrn2-section-lead wp-block-paragraph\">Ces exemples d\u00e9crivent des engagements possibles et des r\u00e9sultats cibles. Il ne s'agit pas de r\u00e9f\u00e9rences clients ni de r\u00e9sultats obtenus.<\/p>\n\n<\/div>\n\n\n<details class=\"wp-block-details nrn2-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Sc\u00e9nario 01<\/summary>\n<p class=\"wp-block-paragraph\">Un distributeur d\u00e9pend d\u2019un ERP et d\u2019un fournisseur de maintenance. Projet : ateliers avec les services d\u2019approvisionnement, les \u00e9quipes commerciales et le service informatique. Objectif : prioriser l\u2019acc\u00e8s des fournisseurs, la reprise et la d\u00e9tection d\u2019interruption de l\u2019activit\u00e9, plut\u00f4t que de pr\u00e9senter les derniers produits.<\/p>\n\n<\/details>\n\n\n<details class=\"wp-block-details nrn2-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Sc\u00e9nario 02<\/summary>\n<p class=\"wp-block-paragraph\">Une entreprise de logiciels lance un portail h\u00e9bergeant les contrats. Projet : analyser les actifs commerciaux, l\u2019\u00e9cosyst\u00e8me et les voies d\u2019attaque. Objectif : int\u00e9grer les exigences de s\u00e9curit\u00e9 et enregistrer le risque r\u00e9siduel ; les parties prenantes indisponibles n\u00e9cessitent un repoussage de la date.<\/p>\n\n<\/details>\n\n\n<details class=\"wp-block-details nrn2-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Contexte technologique et de r\u00e9f\u00e9rence<\/summary>\n<p class=\"wp-block-paragraph\">M\u00e9thode ANSSI EBIOS RM ; supports de formation et registre des risques adapt\u00e9s au client.<\/p>\n\n\n<p class=\"wp-block-paragraph\">L'ensemble final des technologies est convenu lors du cadrage, sur la base de l'interop\u00e9rabilit\u00e9, des licences, des droits d'acc\u00e8s et des exigences op\u00e9rationnelles.<\/p>\n\n<\/details>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">SERVICES CONNECT\u00c9S<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Construisez l'\u00e9tape suivante.<\/h2>\n\n<\/div>\n\n\n<p class=\"nrn2-section-lead wp-block-paragraph\">Ces services peuvent compl\u00e9ter la mission. Ils ne sont pas inclus automatiquement.<\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-related-grid is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-service-card is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-ref wp-block-paragraph\">GRC-06<\/p>\n\n\n<h3 class=\"wp-block-heading\"><a href=\"https:\/\/neranis.com\/fr\/services\/fractional-ciso-et-gouvernance-en-matiere-de-cybersecurite\/\">RSSI \u00e0 temps partiel et gouvernance de la cybers\u00e9curit\u00e9<\/a><\/h3>\n\n\n<p class=\"nrn2-card-desc wp-block-paragraph\">Support ex\u00e9cutif r\u00e9current pour g\u00e9rer les risques de s\u00e9curit\u00e9, les priorit\u00e9s, les projets et les d\u00e9cisions sans embaucher imm\u00e9diatement un CISO \u00e0 temps plein.<\/p>\n\n\n<p class=\"nrn2-text-link wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/services\/fractional-ciso-et-gouvernance-en-matiere-de-cybersecurite\/\">D\u00e9couvrir ce service <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-service-card is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-ref wp-block-paragraph\">REM-03<\/p>\n\n\n<h3 class=\"wp-block-heading\"><a href=\"https:\/\/neranis.com\/fr\/services\/programme-de-remediation-et-gestion-de-la-livraison-entre-les-equipes\/\">Programme de rem\u00e9diation et gestion de la livraison inter-\u00e9quipes<\/a><\/h3>\n\n\n<p class=\"nrn2-card-desc wp-block-paragraph\">Organisation des chantiers de s\u00e9curit\u00e9 entre \u00e9quipes ou prestataires, avec les priorit\u00e9s, les d\u00e9pendances et les d\u00e9cisions de la direction.<\/p>\n\n\n<p class=\"nrn2-text-link wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/services\/programme-de-remediation-et-gestion-de-la-livraison-entre-les-equipes\/\">D\u00e9couvrir ce service <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-service-card is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-ref wp-block-paragraph\">AUD-01<\/p>\n\n\n<h3 class=\"wp-block-heading\"><a href=\"https:\/\/neranis.com\/fr\/services\/evaluation-de-la-maturite-en-matiere-de-cybersecurite\/\">\u00c9valuation de la maturit\u00e9 en cybers\u00e9curit\u00e9<\/a><\/h3>\n\n\n<p class=\"nrn2-card-desc wp-block-paragraph\">Un examen des pratiques, des outils et des responsabilit\u00e9s pour d\u00e9cider quoi s\u00e9curiser en premier, plut\u00f4t que de commencer par l'achat d'un produit.<\/p>\n\n\n<p class=\"nrn2-text-link wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/services\/evaluation-de-la-maturite-en-matiere-de-cybersecurite\/\">D\u00e9couvrir ce service <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-cta is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">Commencer une conversation<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Clarifiez la port\u00e9e.<\/h2>\n\n<\/div>\n\n\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-body-lg wp-block-paragraph\">Nous clarifierons l'objectif, les d\u00e9pendances et les responsabilit\u00e9s de ce service avant de proposer la livraison.<\/p>\n\n\n<div class=\"wp-block-buttons nrn2-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/neranis.com\/fr\/contact\/\">Discutez de vos priorit\u00e9s<\/a><\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>","protected":false},"excerpt":{"rendered":"<p>Une m\u00e9thode structur\u00e9e reliant les objectifs commerciaux \u00e0 des sc\u00e9narios de cyber-risque et \u00e0 un plan de traitement d\u00e9cid\u00e9 par l'organisation.<\/p>","protected":false},"featured_media":0,"template":"single-nrn_service","meta":{"footnotes":""},"nrn_family":[5],"class_list":["post-68","nrn_service","type-nrn_service","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service\/68","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service"}],"about":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/types\/nrn_service"}],"version-history":[{"count":2,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service\/68\/revisions"}],"predecessor-version":[{"id":463,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service\/68\/revisions\/463"}],"wp:attachment":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/media?parent=68"}],"wp:term":[{"taxonomy":"nrn_family","embeddable":true,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_family?post=68"}],"curies":[{"name":"Bien jou\u00e9","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}