{"id":38,"date":"2026-09-13T20:56:51","date_gmt":"2026-09-13T20:56:51","guid":{"rendered":"https:\/\/neranis.com\/?page_id=38"},"modified":"2026-09-13T20:56:51","modified_gmt":"2026-09-13T20:56:51","slug":"gouvernance-des-risques","status":"publish","type":"page","link":"https:\/\/neranis.com\/fr\/expertise\/risk-governance\/","title":{"rendered":"Risk &#038; governance"},"content":{"rendered":"<section class=\"wp-block-group nrn2-section nrn2-page-hero is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-breadcrumb wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/\">Accueil<\/a> <span aria-hidden=\"true\">\/<\/span> <a href=\"https:\/\/neranis.com\/fr\/expertise\/\">Expertise<\/a> \/ Risque et gouvernance<\/p>\n\n\n<div class=\"wp-block-group nrn2-two-col nrn2-hero-layout-r3 is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-hero-split-copy is-layout-flow wp-block-group-is-layout-flow\">\n\n<p class=\"nrn2-kicker wp-block-paragraph\">EXPERTISE \/ GRC<\/p>\n\n\n<h1 class=\"wp-block-heading nrn2-title\">Risques et gouvernance<\/h1>\n\n\n<p class=\"nrn2-lead wp-block-paragraph\">Liez l'investissement en mati\u00e8re de s\u00e9curit\u00e9 aux cons\u00e9quences commerciales et \u00e0 des exigences r\u00e9ellement applicables, puis organisez les d\u00e9cisions.<\/p>\n\n<\/div>\n\n\n<figure class=\"wp-block-image size-full nrn2-context-image nrn2-visual-asset-family-grc\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"720\" src=\"https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/family-grc.webp\" alt=\"\" class=\"wp-image-198\" srcset=\"https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/family-grc.webp 1600w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/family-grc-300x135.webp 300w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/family-grc-1024x461.webp 1024w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/family-grc-768x346.webp 768w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/family-grc-1536x691.webp 1536w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><\/figure>\n<\/div>\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">QUE TRAITER<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Choisissez le bon engagement.<\/h2>\n\n<\/div>\n\n\n<p class=\"nrn2-section-lead wp-block-paragraph\">Le travail \u00e9taye les d\u00e9cisions et les \u00e9l\u00e9ments de preuve pour le cadre convenu. Les avis juridiques, la certification ind\u00e9pendante et les d\u00e9cisions des r\u00e9gulateurs ou des \u00e9valuateurs demeurent des responsabilit\u00e9s distinctes.<\/p>\n\n<\/div>\n\n<div class=\"nrn2-catalogue\" data-nrn-catalogue><form class=\"nrn2-filter\" method=\"get\" action=\"\"><div class=\"nrn2-filter-field\"><label for=\"nrn2-filter-1q\">Rechercher par th\u00e8me, besoin ou r\u00e9f\u00e9rence<\/label><input type=\"search\" name=\"nrn_q\" id=\"nrn2-filter-1q\" value=\"\" placeholder=\"Par exemple : IAM, audit, SOC, IA\" autocomplete=\"off\"><\/div><button type=\"submit\">Rechercher<\/button><a class=\"nrn2-filter-reset\" href=\"\/fr\/wp-json\/wp\/v2\/pages\/38\" data-nrn-reset>R\u00e9initialiser<\/a><input type=\"hidden\" name=\"trp-form-language\" value=\"fr\"\/><\/form><p class=\"nrn2-results-count\" aria-live=\"polite\"><span data-nrn-count>8<\/span> <span>r\u00e9sultats<\/span><\/p><div class=\"nrn2-catalogue-grid\"><article class=\"nrn2-service-card nrn2-catalogue-item\" data-nrn-item data-family=\"grc\" data-reference=\"GRC-01\"><p class=\"nrn2-ref\">GRC-01 \/ Risques et gouvernance<\/p><h3><a href=\"https:\/\/neranis.com\/fr\/services\/ebios-risk-manager-risk-assessment\/\">\u00e9valuation des risques EBIOS Risk Manager<\/a><\/h3><p class=\"nrn2-card-desc\">Une m\u00e9thode structur\u00e9e reliant les objectifs commerciaux \u00e0 des sc\u00e9narios de cyber-risque et \u00e0 un plan de traitement d\u00e9cid\u00e9 par l'organisation.<\/p><p class=\"nrn2-text-link\"><a href=\"https:\/\/neranis.com\/fr\/services\/ebios-risk-manager-risk-assessment\/\">P\u00e9rim\u00e8tre et livrables <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p><\/article><article class=\"nrn2-service-card nrn2-catalogue-item\" data-nrn-item data-family=\"grc\" data-reference=\"GRC-02\"><p class=\"nrn2-ref\">GRC-02 \/ Risques et gouvernance<\/p><h3><a href=\"https:\/\/neranis.com\/fr\/services\/ebios-2010-review-and-transition-to-ebios-rm\/\">Revue d'EBIOS 2010 et transition vers EBIOS RM<\/a><\/h3><p class=\"nrn2-card-desc\">Actualiser une \u00e9valuation h\u00e9rit\u00e9e d'EBIOS 2010 ou accompagner sa transition vers EBIOS Risk Manager sans traiter les versions comme interchangeables.<\/p><p class=\"nrn2-text-link\"><a href=\"https:\/\/neranis.com\/fr\/services\/ebios-2010-review-and-transition-to-ebios-rm\/\">P\u00e9rim\u00e8tre et livrables <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p><\/article><article class=\"nrn2-service-card nrn2-catalogue-item\" data-nrn-item data-family=\"grc\" data-reference=\"GRC-03\"><p class=\"nrn2-ref\">GRC-03 \/ Risque et gouvernance<\/p><h3><a href=\"https:\/\/neranis.com\/fr\/services\/iso-iec-27001-and-isms-implementation-support\/\">Support \u00e0 la mise en \u0153uvre de la norme ISO\/IEC 27001 et du SMSI<\/a><\/h3><p class=\"nrn2-card-desc\">Mise en place d'un syst\u00e8me de management de la s\u00e9curit\u00e9 de l'information : responsabilit\u00e9s, risques, mesures, preuves et am\u00e9lioration continue, avec pr\u00e9paration optionnelle \u00e0 la certification.<\/p><p class=\"nrn2-text-link\"><a href=\"https:\/\/neranis.com\/fr\/services\/iso-iec-27001-and-isms-implementation-support\/\">P\u00e9rim\u00e8tre et livrables <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p><\/article><article class=\"nrn2-service-card nrn2-catalogue-item\" data-nrn-item data-family=\"grc\" data-reference=\"GRC-04\"><p class=\"nrn2-ref\">GRC-04 \/ Risques et gouvernance<\/p><h3><a href=\"https:\/\/neranis.com\/fr\/services\/nis-2-readiness-and-security-improvement-plan\/\">Plan de pr\u00e9paration \u00e0 NIS 2 et d'am\u00e9lioration de la s\u00e9curit\u00e9<\/a><\/h3><p class=\"nrn2-card-desc\">Assistance pour \u00e9valuer l'applicabilit\u00e9 potentielle de la directive NIS 2 et d\u00e9velopper des mesures de s\u00e9curit\u00e9 techniques, organisationnelles et fond\u00e9es sur des preuves.<\/p><p class=\"nrn2-text-link\"><a href=\"https:\/\/neranis.com\/fr\/services\/nis-2-readiness-and-security-improvement-plan\/\">P\u00e9rim\u00e8tre et livrables <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p><\/article><article class=\"nrn2-service-card nrn2-catalogue-item\" data-nrn-item data-family=\"grc\" data-reference=\"GRC-05\"><p class=\"nrn2-ref\">GRC-05 \/ Risque et gouvernance<\/p><h3><a href=\"https:\/\/neranis.com\/fr\/services\/dora-and-ict-risk-management-support\/\">DORA et support \u00e0 la gestion des risques TIC<\/a><\/h3><p class=\"nrn2-card-desc\">Soutien \u00e0 la r\u00e9silience op\u00e9rationnelle num\u00e9rique des entit\u00e9s financi\u00e8res concern\u00e9es et aux preuves demand\u00e9es \u00e0 leurs fournisseurs de TIC.<\/p><p class=\"nrn2-text-link\"><a href=\"https:\/\/neranis.com\/fr\/services\/dora-and-ict-risk-management-support\/\">P\u00e9rim\u00e8tre et livrables <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p><\/article><article class=\"nrn2-service-card nrn2-catalogue-item\" data-nrn-item data-family=\"grc\" data-reference=\"GRC-06\"><p class=\"nrn2-ref\">GRC-06 \/ Risque et gouvernance<\/p><h3><a href=\"https:\/\/neranis.com\/fr\/services\/fractional-ciso-and-cybersecurity-governance\/\">RSSI \u00e0 temps partiel et gouvernance de la cybers\u00e9curit\u00e9<\/a><\/h3><p class=\"nrn2-card-desc\">Support ex\u00e9cutif r\u00e9current pour g\u00e9rer les risques de s\u00e9curit\u00e9, les priorit\u00e9s, les projets et les d\u00e9cisions sans embaucher imm\u00e9diatement un CISO \u00e0 temps plein.<\/p><p class=\"nrn2-text-link\"><a href=\"https:\/\/neranis.com\/fr\/services\/fractional-ciso-and-cybersecurity-governance\/\">P\u00e9rim\u00e8tre et livrables <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p><\/article><article class=\"nrn2-service-card nrn2-catalogue-item\" data-nrn-item data-family=\"grc\" data-reference=\"GRC-07\"><p class=\"nrn2-ref\">GRC-07 \/ Risque et gouvernance<\/p><h3><a href=\"https:\/\/neranis.com\/fr\/services\/security-policies-procedures-and-project-governance\/\">Politiques de s\u00e9curit\u00e9, proc\u00e9dures et gouvernance de projet<\/a><\/h3><p class=\"nrn2-card-desc\">D\u00e9finition de r\u00e8gles compr\u00e9hensibles et applicables pour l'acc\u00e8s, l'utilisation, les op\u00e9rations et les d\u00e9cisions de s\u00e9curit\u00e9 au sein des projets.<\/p><p class=\"nrn2-text-link\"><a href=\"https:\/\/neranis.com\/fr\/services\/security-policies-procedures-and-project-governance\/\">P\u00e9rim\u00e8tre et livrables <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p><\/article><article class=\"nrn2-service-card nrn2-catalogue-item\" data-nrn-item data-family=\"grc\" data-reference=\"GRC-08\"><p class=\"nrn2-ref\">GRC-08 \/ Risque et gouvernance<\/p><h3><a href=\"https:\/\/neranis.com\/fr\/services\/third-party-and-supply-chain-risk-management\/\">Gestion des risques li\u00e9s aux tiers et \u00e0 la cha\u00eene d'approvisionnement<\/a><\/h3><p class=\"nrn2-card-desc\">\u00c9valuation des risques pr\u00e9sent\u00e9s par les fournisseurs, logiciels et services externes en fonction de leur acc\u00e8s et de leur importance pour l'entreprise.<\/p><p class=\"nrn2-text-link\"><a href=\"https:\/\/neranis.com\/fr\/services\/third-party-and-supply-chain-risk-management\/\">P\u00e9rim\u00e8tre et livrables <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p><\/article><\/div><p class=\"nrn2-empty\" data-nrn-empty hidden>Aucun r\u00e9sultat correspondant. Essayez un terme plus g\u00e9n\u00e9ral ou une autre famille.<\/p><\/div>\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section nrn2-canvas is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-two-col is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">FIXER DES LIMITES<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Ce sur quoi nous sommes d&#x27;accord<br>Avant de commencer.<\/h2>\n\n<\/div>\n\n\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<ul class=\"wp-block-list nrn2-list\">\n<li>Client : sponsor, dirigeants disponibles, d\u00e9cisions sur les risques et avis juridiques si n\u00e9cessaire. Prestataire : m\u00e9thodologie, animation, analyse et dossier de d\u00e9cision.<\/li>\n\n\n<li>Entit\u00e9s, processus, parties prenantes, p\u00e9rim\u00e8tre r\u00e9glementaire, maturit\u00e9 des documents et ateliers. Projet, support ponctuel ou RSSI fractionn\u00e9 selon le besoin.<\/li>\n\n<\/ul>\n\n\n<p class=\"nrn2-small wp-block-paragraph\">Les noms de technologies figurant dans les descriptions des services constituent des exemples de mise en \u0153uvre et ne constituent en aucun cas des d\u00e9clarations de partenariat ou de droit de licence.<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-cta is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">Commencer une conversation<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Mettons la prochaine \u00e9tape en lumi\u00e8re.<\/h2>\n\n<\/div>\n\n\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-body-lg wp-block-paragraph\">Dites-nous ce que vous devez prot\u00e9ger, modifier ou comprendre. Nous commencerons par le p\u00e9rim\u00e8tre, et non par une liste de produits.<\/p>\n\n\n<div class=\"wp-block-buttons nrn2-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/neranis.com\/fr\/contact\/\">Discutez de vos priorit\u00e9s<\/a><\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>","protected":false},"excerpt":{"rendered":"<p>Liez l'investissement en mati\u00e8re de s\u00e9curit\u00e9 aux cons\u00e9quences commerciales et \u00e0 des exigences r\u00e9ellement applicables, puis organisez les d\u00e9cisions.<\/p>","protected":false},"author":1,"featured_media":0,"parent":12,"menu_order":5,"comment_status":"closed","ping_status":"closed","template":"cyber-page-2026","meta":{"footnotes":""},"class_list":["post-38","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/pages\/38","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/comments?post=38"}],"version-history":[{"count":2,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/pages\/38\/revisions"}],"predecessor-version":[{"id":417,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/pages\/38\/revisions\/417"}],"up":[{"embeddable":true,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/pages\/12"}],"wp:attachment":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/media?parent=38"}],"curies":[{"name":"Bien jou\u00e9","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}