{"id":30890,"date":"2026-10-07T09:29:46","date_gmt":"2026-10-07T07:29:46","guid":{"rendered":"https:\/\/acgcyberacademy.fr\/?p=30890"},"modified":"2026-10-08T22:41:06","modified_gmt":"2026-10-08T20:41:06","slug":"securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge","status":"publish","type":"post","link":"https:\/\/acgcyberacademy.fr\/en\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/","title":{"rendered":"S\u00e9curit\u00e9 de l&rsquo;IA :ce que les normes couvrent, et ce qu&rsquo;elles laissent \u00e0 votre charge"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"30890\" class=\"elementor elementor-30890\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-62bfdb6 e-flex e-con-boxed e-con e-child\" data-id=\"62bfdb6\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-ab88047 e-con-full elementor-hidden-mobile e-flex e-con e-child\" data-id=\"ab88047\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-f8aeb07 e-con-full elementor-hidden-tablet elementor-hidden-mobile e-flex e-con e-child\" data-id=\"f8aeb07\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;sticky&quot;:&quot;top&quot;,&quot;sticky_on&quot;:[&quot;desktop&quot;],&quot;sticky_offset&quot;:100,&quot;sticky_parent&quot;:&quot;yes&quot;,&quot;sticky_effects_offset&quot;:0,&quot;sticky_anchor_link_offset&quot;:0}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0f8a222 eael-wpforms-labels-yes eael-wpforms-form-button-custom elementor-widget elementor-widget-eael-wpforms\" data-id=\"0f8a222\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"eael-wpforms.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t            <div class=\"eael-contact-form eael-wpforms title-description-hide eael-custom-radio-checkbox eael-wpforms-align-center\">\n                                    <div class=\"eael-wpforms-heading\">\n                                                                    <\/div>\n                                <div class=\"wpforms-container wpforms-container-full wpforms-render-modern\" id=\"wpforms-27017\"><form id=\"wpforms-form-27017\" class=\"wpforms-validate wpforms-form wpforms-ajax-form\" data-formid=\"27017\" method=\"post\" enctype=\"multipart\/form-data\" action=\"\/en\/wp-json\/wp\/v2\/posts\/30890\" data-token=\"f5d624de36e59b97ab834abc7b1d02f8\" data-token-time=\"1791671568\"><noscript class=\"wpforms-error-noscript\">Please enable JavaScript in your browser to complete this form.<\/noscript><div id=\"wpforms-error-noscript\" style=\"display: none;\">Please enable JavaScript in your browser to complete this form.<\/div><div class=\"wpforms-field-container\">\t\t<div id=\"wpforms-27017-field_3-container\"\n\t\t\tclass=\"wpforms-field wpforms-field-text\"\n\t\t\tdata-field-type=\"text\"\n\t\t\tdata-field-id=\"3\"\n\t\t\t>\n\t\t\t<label class=\"wpforms-field-label\" for=\"wpforms-27017-field_3\" >T\u00e9l\u00e9phone Adresse Nom<\/label>\n\t\t\t<input type=\"text\" id=\"wpforms-27017-field_3\" class=\"wpforms-field-medium\" name=\"wpforms[fields][3]\" >\n\t\t<\/div>\n\t\t<div id=\"wpforms-27017-field_1-container\" class=\"wpforms-field wpforms-field-name\" data-field-id=\"1\"><label class=\"wpforms-field-label\" for=\"wpforms-27017-field_1\">Nom <span class=\"wpforms-required-label\" aria-hidden=\"true\">*<\/span><\/label><input type=\"text\" id=\"wpforms-27017-field_1\" class=\"wpforms-field-small wpforms-field-required\" name=\"wpforms[fields][1]\" aria-errormessage=\"wpforms-27017-field_1-error\" required><\/div><div id=\"wpforms-27017-field_4-container\" class=\"wpforms-field wpforms-field-name\" data-field-id=\"4\"><label class=\"wpforms-field-label\" for=\"wpforms-27017-field_4\">Pr\u00e9nom <span class=\"wpforms-required-label\" aria-hidden=\"true\">*<\/span><\/label><input type=\"text\" id=\"wpforms-27017-field_4\" class=\"wpforms-field-small wpforms-field-required\" name=\"wpforms[fields][4]\" aria-errormessage=\"wpforms-27017-field_4-error\" required><\/div><div id=\"wpforms-27017-field_5-container\" class=\"wpforms-field wpforms-field-email\" data-field-id=\"5\"><label class=\"wpforms-field-label\" for=\"wpforms-27017-field_5\">T\u00e9l\u00e9phone professionnel  <span class=\"wpforms-required-label\" aria-hidden=\"true\">*<\/span><\/label><input type=\"email\" id=\"wpforms-27017-field_5\" class=\"wpforms-field-small wpforms-field-required\" name=\"wpforms[fields][5]\" spellcheck=\"false\" aria-errormessage=\"wpforms-27017-field_5-error\" required><\/div><div id=\"wpforms-27017-field_2-container\" class=\"wpforms-field wpforms-field-email\" data-field-id=\"2\"><label class=\"wpforms-field-label\" for=\"wpforms-27017-field_2\">Adresse email <span class=\"wpforms-required-label\" aria-hidden=\"true\">*<\/span><\/label><input type=\"email\" id=\"wpforms-27017-field_2\" class=\"wpforms-field-small wpforms-field-required\" name=\"wpforms[fields][2]\" spellcheck=\"false\" aria-errormessage=\"wpforms-27017-field_2-error\" required><\/div><script>\n\t\t\t\t( function() {\n\t\t\t\t\tconst style = document.createElement( 'style' );\n\t\t\t\t\tstyle.appendChild( document.createTextNode( '#wpforms-27017-field_3-container { position: absolute !important; overflow: hidden !important; display: inline !important; height: 1px !important; width: 1px !important; z-index: -1000 !important; padding: 0 !important; } #wpforms-27017-field_3-container input { visibility: hidden; } #wpforms-conversational-form-page #wpforms-27017-field_3-container label { counter-increment: none; }' ) );\n\t\t\t\t\tdocument.head.appendChild( style );\n\t\t\t\t\tdocument.currentScript?.remove();\n\t\t\t\t} )();\n\t\t\t<\/script><\/div><!-- .wpforms-field-container --><div class=\"wpforms-submit-container\" ><input type=\"hidden\" name=\"wpforms[id]\" value=\"27017\"><input type=\"hidden\" name=\"wpforms[time_token]\" value=\"1791671568.c4b60bbc0ad2acb9bcd845dfc5a9b24c67dc73fa6b626c6f9c212540ef1bdc1d\"><input type=\"hidden\" name=\"page_title\" value=\"\"><input type=\"hidden\" name=\"page_url\" value=\"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/posts\/30890\"><input type=\"hidden\" name=\"url_referer\" value=\"\"><button type=\"submit\" name=\"wpforms[submit]\" id=\"wpforms-submit-27017\" class=\"wpforms-submit\" data-alt-text=\"Sending...\" data-submit-text=\"T\u00e9l\u00e9charger le catalogue\" aria-live=\"assertive\" value=\"wpforms-submit\">T\u00e9l\u00e9charger le catalogue<\/button><img decoding=\"async\" src=\"https:\/\/acgcyberacademy.fr\/wp-content\/plugins\/wpforms-lite\/assets\/images\/submit-spin.svg\" class=\"wpforms-submit-spinner\" style=\"display: none;\" width=\"26\" height=\"26\" alt=\"Loading\"><\/div><\/form><\/div>  <!-- .wpforms-container -->            <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9eefa8b e-con-full e-flex e-con e-child\" data-id=\"9eefa8b\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-674513c elementor-widget elementor-widget-spacer\" data-id=\"674513c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-293386b elementor-widget elementor-widget-text-editor\" data-id=\"293386b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"meta\"><div class=\"wrap\">Chakib Ameur \u00b7 7 Octobre 2026 \u00b7 Lecture 6 min<\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-abb5c8f elementor-widget elementor-widget-image\" data-id=\"abb5c8f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"800\" height=\"343\" src=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2024\/03\/couverture_1600x686-1024x439.jpg\" class=\"attachment-large size-large wp-image-30891\" alt=\"\" srcset=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2024\/03\/couverture_1600x686-1024x439.jpg 1024w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2024\/03\/couverture_1600x686-300x129.jpg 300w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2024\/03\/couverture_1600x686-768x329.jpg 768w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2024\/03\/couverture_1600x686-1536x659.jpg 1536w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2024\/03\/couverture_1600x686-18x8.jpg 18w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2024\/03\/couverture_1600x686.jpg 1600w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e392947 elementor-widget elementor-widget-text-editor\" data-id=\"e392947\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"color: #003366;\">S\u00e9curit\u00e9 de l&rsquo;IA : ce que les normes couvrent,<\/span> <span style=\"color: #993300;\">et ce qu&rsquo;elles laissent \u00e0 votre charge<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c4a4a9f elementor-widget elementor-widget-text-editor\" data-id=\"c4a4a9f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"chapeau\"><p>ISO\/IEC 42001, ISO\/IEC 27090, NIST AI RMF, OWASP, MITRE ATLAS, sans compter l&rsquo;AI Act. L&rsquo;offre normative a rattrap\u00e9 son retard. Reste \u00e0 savoir qui fait quoi, et ce qui n&rsquo;est couvert par aucun de ces textes.<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2e21f70 elementor-widget elementor-widget-text-editor\" data-id=\"2e21f70\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>En salle de formation comme en mission, la s\u00e9quence se r\u00e9p\u00e8te. On me montre une politique d&rsquo;usage de l&rsquo;IA, un registre des syst\u00e8mes, parfois le calendrier d&rsquo;une certification. Puis je pose une question simple : qui, chez vous, a essay\u00e9 de faire dire \u00e0 ce syst\u00e8me quelque chose qu&rsquo;il n&rsquo;aurait pas d\u00fb dire ?<\/p><p>Cet article donne une carte. Qui couvre quoi parmi les cinq r\u00e9f\u00e9rentiels disponibles, ce que l&rsquo;AI Act impose et \u00e0 quelle date, et surtout un terrain qu&rsquo;aucun d&rsquo;entre eux ne traite : l&rsquo;IA qui entre dans l&rsquo;entreprise sans projet, par la mise \u00e0 jour d&rsquo;un outil d\u00e9j\u00e0 valid\u00e9.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-642f120 elementor-widget elementor-widget-text-editor\" data-id=\"642f120\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>PREMI\u00c8RE ID\u00c9E RE\u00c7UE<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ef6087b elementor-widget elementor-widget-text-editor\" data-id=\"ef6087b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Ce qu&rsquo;une certification ne couvre pas<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a823c5e elementor-widget elementor-widget-text-editor\" data-id=\"a823c5e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>L&rsquo;ISO\/IEC 42001, publi\u00e9e en d\u00e9cembre 2023, est la premi\u00e8re norme internationale de syst\u00e8me de management d\u00e9di\u00e9e \u00e0 l&rsquo;intelligence artificielle. Elle aide une organisation \u00e0 \u00e9tablir, mettre en \u0153uvre et am\u00e9liorer un syst\u00e8me de management de l&rsquo;IA, afin que celle-ci soit d\u00e9velopp\u00e9e et utilis\u00e9e de fa\u00e7on responsable, s\u00fbre et transparente. Elle est certifiable, donc opposable \u00e0 un client, \u00e0 un donneur d&rsquo;ordre ou \u00e0 un auditeur.<\/p><p>C&rsquo;est pr\u00e9cis\u00e9ment ce qui fait sa force et sa limite. Les analyses du secteur le notent sans d\u00e9tour : ni le NIST AI RMF ni l&rsquo;ISO\/IEC 42001 ne prescrivent de contr\u00f4les techniques sp\u00e9cifiques, notamment pour les agents. Ils structurent la d\u00e9cision, pas la d\u00e9fense.<\/p><p>Autrement dit, une organisation peut \u00eatre exemplaire sur sa gouvernance et n&rsquo;avoir jamais soumis un seul mod\u00e8le \u00e0 un test d&rsquo;attaque.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1b87d2a elementor-widget elementor-widget-text-editor\" data-id=\"1b87d2a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>LA MARCHE MANQUANTE<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e21f3f1 elementor-widget elementor-widget-text-editor\" data-id=\"e21f3f1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Une norme pour le point de vue de l&rsquo;attaquant<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f751abd elementor-widget elementor-widget-text-editor\" data-id=\"f751abd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>L&rsquo;ISO\/IEC 27090 traite des menaces et des situations susceptibles de compromettre les syst\u00e8mes d&rsquo;intelligence artificielle. Elle est au stade des derni\u00e8res \u00e9tapes de publication. Elle appartient \u00e0 la famille de l&rsquo;ISO\/IEC 27001 et de l&rsquo;ISO\/IEC 27002, dont elle prolonge la logique vers les sp\u00e9cificit\u00e9s de l&rsquo;IA.<\/p><p>Son objet est op\u00e9rationnel. Identifier les menaces propres \u00e0 un syst\u00e8me d&rsquo;IA sur tout son cycle de vie, en comprendre les cons\u00e9quences, proposer des pistes de d\u00e9tection et d&rsquo;att\u00e9nuation. Les familles document\u00e9es publiquement sont les suivantes :<\/p><ul><li>l&#8217;empoisonnement des donn\u00e9es d&rsquo;entra\u00eenement, qui alt\u00e8re le comportement du mod\u00e8le \u00e0 la source ;<\/li><li>les entr\u00e9es adverses, construites pour induire le mod\u00e8le en erreur ;<\/li><li>l&rsquo;extraction de mod\u00e8le, qui permet d&rsquo;en reconstituer une copie \u00e0 force de requ\u00eates ;<\/li><li>l&rsquo;inf\u00e9rence d&rsquo;appartenance, qui r\u00e9v\u00e8le si une donn\u00e9e figurait dans le jeu d&rsquo;entra\u00eenement ;<\/li><li>l&rsquo;injection de prompt, qui d\u00e9tourne les instructions donn\u00e9es \u00e0 un assistant.<\/li><\/ul><p>Un exemple rend la derni\u00e8re concr\u00e8te. Une entreprise d\u00e9ploie un assistant interne branch\u00e9 sur sa base documentaire. Un document d\u00e9pos\u00e9 par un tiers, un devis, un CV, un compte rendu, contient une consigne r\u00e9dig\u00e9e \u00e0 l&rsquo;attention du mod\u00e8le. L&rsquo;assistant la lit comme une instruction, et non comme du contenu. Personne n&rsquo;a forc\u00e9 de compte, aucune alerte ne se d\u00e9clenche.<\/p><p>C&rsquo;est le point qui change la fa\u00e7on de surveiller : dans la plupart de ces cas, l&rsquo;acc\u00e8s est autoris\u00e9 et le trafic ressemble \u00e0 un usage normal. Les outils de d\u00e9tection con\u00e7us pour rep\u00e9rer une intrusion n&rsquo;ont pas grand-chose \u00e0 signaler.<\/p><p>Derni\u00e8re pr\u00e9cision, utile pour \u00e9viter un malentendu courant : il s&rsquo;agit d&rsquo;un guide, pas d&rsquo;un r\u00e9f\u00e9rentiel de certification. On ne sera pas \u00ab certifi\u00e9 27090 \u00bb.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-8ae9d66 e-con-full e-flex e-con e-child\" data-id=\"8ae9d66\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-83e3368 elementor-widget elementor-widget-text-editor\" data-id=\"83e3368\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Ce que couvre chacune<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c3ce566 elementor-widget elementor-widget-text-editor\" data-id=\"c3ce566\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Elles se compl\u00e8tent et ne se remplacent pas.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-87802ef e-con-full e-grid e-con e-child\" data-id=\"87802ef\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-94499a0 elementor-widget elementor-widget-text-editor\" data-id=\"94499a0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>ISO\/IEC 42001<\/b><\/p><ul><li>Syst\u00e8me de management de l&rsquo;IA<\/li><li>R\u00f4les, politiques, registre, preuves<\/li><li>Certifiable, donc opposable<\/li><li>R\u00e9pond \u00e0 : qui d\u00e9cide, et sur quelle base<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8e9a3bc elementor-widget elementor-widget-text-editor\" data-id=\"8e9a3bc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>ISO\/IEC 27090<\/b><\/p><ul><li>Menaces visant les syst\u00e8mes d&rsquo;IA<\/li><li>Cycle de vie, d\u00e9tection, att\u00e9nuation<\/li><li>Guide, non certifiable<\/li><li>R\u00e9pond \u00e0 : contre quoi on se prot\u00e8ge<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-194086b elementor-widget elementor-widget-image\" data-id=\"194086b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"446\" src=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/09\/photo_interieure-1024x571.png\" class=\"attachment-large size-large wp-image-30895\" alt=\"\" srcset=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/09\/photo_interieure-1024x571.png 1024w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/09\/photo_interieure-300x167.png 300w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/09\/photo_interieure-768x428.png 768w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/09\/photo_interieure-1536x857.png 1536w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/09\/photo_interieure-18x10.png 18w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/09\/photo_interieure.png 1800w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b2837c3 elementor-widget elementor-widget-text-editor\" data-id=\"b2837c3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>LA CARTE<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-feae1bd elementor-widget elementor-widget-text-editor\" data-id=\"feae1bd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>S&rsquo;y retrouver dans les sigles<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3afbc16 elementor-widget elementor-widget-text-editor\" data-id=\"3afbc16\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Quand une \u00e9quipe d\u00e9couvre le sujet, sa difficult\u00e9 n&rsquo;est pas de trouver des r\u00e9f\u00e9rences, c&rsquo;est d&rsquo;en avoir trop. Les sigles tombent en rafale et finissent par se ressembler.<\/p><p>Une image aide \u00e0 les s\u00e9parer. Pensez \u00e0 un b\u00e2timent. L&rsquo;OWASP vous dit o\u00f9 sont les fen\u00eatres mal ferm\u00e9es. MITRE ATLAS vous raconte comment un cambrioleur s&rsquo;y prend, \u00e9tage par \u00e9tage. Le NIST AI RMF et l&rsquo;ISO\/IEC 42001 \u00e9crivent le r\u00e8glement int\u00e9rieur et d\u00e9signent qui garde les cl\u00e9s. L&rsquo;ISO\/IEC 27090, elle, d\u00e9crit l&rsquo;alarme et les capteurs. Et l&rsquo;AI Act, dans ce d\u00e9cor, joue le r\u00f4le du code de la construction : il rend certaines de ces exigences obligatoires, avec des \u00e9ch\u00e9ances.<\/p><p>Aucun de ces textes ne remplace les autres, et c&rsquo;est bien ce qui d\u00e9route au premier abord.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e2c5d7f e-con-full e-flex e-con e-child\" data-id=\"e2c5d7f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-35b60dc elementor-widget elementor-widget-text-editor\" data-id=\"35b60dc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>\u00c0 quoi sert quoi<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ef8c4ea elementor-widget elementor-widget-text-editor\" data-id=\"ef8c4ea\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Aucun ne remplace les autres. Ils se superposent.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d154d73 e-con-full e-grid e-con e-child\" data-id=\"d154d73\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a52108a elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"a52108a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>OWASP LLM Top 10<\/b><\/p><p>Les vuln\u00e9rabilit\u00e9s applicatives des syst\u00e8mes \u00e0 base de mod\u00e8les de langage. Pour les \u00e9quipes de d\u00e9veloppement et les revues de code.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-32c5e1d elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"32c5e1d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>MITRE ATLAS<\/b><\/p><p>Le catalogue des tactiques et techniques adverses visant l&rsquo;IA. Pour la mod\u00e9lisation de menaces et les tests.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c01d68d elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"c01d68d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>NIST AI RMF et ISO\/IEC 42001<\/b><\/p><p>La gouvernance et la gestion du risque, sur tout le cycle de vie. Pour l&rsquo;organisation et ses preuves.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a0bf730 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"a0bf730\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>ISO\/IEC 27090<\/b><\/p><p>Les menaces propres aux syst\u00e8mes d&rsquo;IA et leurs contre-mesures. Le cha\u00eenon entre la gouvernance et la technique.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-378dc7f elementor-widget elementor-widget-text-editor\" data-id=\"378dc7f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>LE CADRE L\u00c9GAL<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1626e5e elementor-widget elementor-widget-text-editor\" data-id=\"1626e5e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Le calendrier a boug\u00e9, pas l&rsquo;exigence<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d6c4a4c elementor-widget elementor-widget-text-editor\" data-id=\"d6c4a4c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Le r\u00e8glement europ\u00e9en sur l&rsquo;IA s&rsquo;applique par \u00e9tapes, et son calendrier a boug\u00e9 cet \u00e9t\u00e9. Le r\u00e8glement (UE) 2026\/1744, publi\u00e9 au Journal officiel de l&rsquo;Union le 24 juillet 2026, a repouss\u00e9 les obligations des syst\u00e8mes \u00e0 haut risque. Report n&rsquo;est pas suspension : les interdictions, l&rsquo;obligation de ma\u00eetrise de l&rsquo;IA, les r\u00e8gles des mod\u00e8les \u00e0 usage g\u00e9n\u00e9ral, la transparence et les pouvoirs de sanction s&rsquo;appliquent d\u00e9j\u00e0.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-bcaf7a6 e-con-full e-flex e-con e-child\" data-id=\"bcaf7a6\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0544079 elementor-widget elementor-widget-text-editor\" data-id=\"0544079\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>AI Act, les \u00e9tapes qui comptent<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1737e36 elementor-widget elementor-widget-text-editor\" data-id=\"1737e36\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Calendrier au 5 octobre 2026, apr\u00e8s le r\u00e8glement (UE) 2026\/1744.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-dc04be0 e-con-full e-grid e-con e-child\" data-id=\"dc04be0\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-da96efc e-con-full e-flex e-con e-child\" data-id=\"da96efc\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0630a1e elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"0630a1e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><span class=\"d\">2 f\u00e9vrier 2025<\/span><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3f3fe42 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"3f3fe42\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Interdictions et ma\u00eetrise de l&rsquo;IA<\/b><\/p><p>Pratiques interdites applicables, et obligation de former les personnes qui utilisent ou d\u00e9ploient des syst\u00e8mes d&rsquo;IA.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c7f49aa e-con-full e-flex e-con e-child\" data-id=\"c7f49aa\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a5b0e30 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"a5b0e30\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><span class=\"d\">2 ao\u00fbt 2025<\/span><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-01beaba elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"01beaba\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Mod\u00e8les \u00e0 usage g\u00e9n\u00e9ral<\/b><\/p><p>Obligations applicables aux fournisseurs de mod\u00e8les d&rsquo;IA \u00e0 usage g\u00e9n\u00e9ral, et mise en place de la gouvernance europ\u00e9enne.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d9f911e e-con-full e-flex e-con e-child\" data-id=\"d9f911e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c6f8cff elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"c6f8cff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><span class=\"d\">2 ao\u00fbt 2026<\/span><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d99ad60 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"d99ad60\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Transparence et sanctions<\/b><\/p><p>Obligations de transparence applicables, et pouvoirs de sanction des autorit\u00e9s nationales.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-20a360c e-con-full e-flex e-con e-child\" data-id=\"20a360c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-42e5c78 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"42e5c78\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"color: #993300;\"><strong>2 d\u00e9cembre 2027<\/strong><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3824d58 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"3824d58\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Haut risque, annexe III<\/b><\/p><p>Syst\u00e8mes autonomes \u00e0 haut risque, dont la biom\u00e9trie, l&#8217;emploi, le cr\u00e9dit ou l&rsquo;\u00e9ducation. \u00c9ch\u00e9ance report\u00e9e par le r\u00e8glement 2026\/1744.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c3b8052 e-con-full e-flex e-con e-child\" data-id=\"c3b8052\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4282f5b elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"4282f5b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"color: #993300;\"><strong><span class=\"d\">2 ao\u00fbt 2028<\/span><\/strong><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e624934 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"e624934\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Haut risque, annexe I<\/b><\/p><p>Syst\u00e8mes d&rsquo;IA int\u00e9gr\u00e9s \u00e0 des produits d\u00e9j\u00e0 soumis \u00e0 une r\u00e9glementation sectorielle. M\u00eame report.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-02d4df0 elementor-widget elementor-widget-text-editor\" data-id=\"02d4df0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Le d\u00e9lai suppl\u00e9mentaire porte donc sur la conformit\u00e9 des syst\u00e8mes \u00e0 haut risque. Pas sur la capacit\u00e9 \u00e0 expliquer ce que fait votre IA, ni sur la responsabilit\u00e9 en cas d&rsquo;incident.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7acb65e elementor-widget elementor-widget-text-editor\" data-id=\"7acb65e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>L&rsquo;ANGLE MORT<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f9c17ee elementor-widget elementor-widget-text-editor\" data-id=\"f9c17ee\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>L&rsquo;IA entr\u00e9e par la petite porte<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-919c6d0 elementor-widget elementor-widget-text-editor\" data-id=\"919c6d0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Tous les cadres \u00e9voqu\u00e9s jusqu&rsquo;ici supposent un projet identifi\u00e9, avec un porteur et un p\u00e9rim\u00e8tre. Or une partie de l&rsquo;IA entre dans l&rsquo;entreprise par une autre porte : la mise \u00e0 jour d&rsquo;un outil d\u00e9j\u00e0 valid\u00e9. La messagerie, le CRM, la suite bureautique, le service d&rsquo;assistance. Une fonction est activ\u00e9e, parfois par d\u00e9faut, et des donn\u00e9es partent vers un mod\u00e8le que personne n&rsquo;a \u00e9valu\u00e9.<\/p><p>Ce shadow AI ne se traite pas en interdisant, et pas davantage en r\u00e9digeant une politique suppl\u00e9mentaire. Il se traite en rouvrant ce qui a d\u00e9j\u00e0 \u00e9t\u00e9 approuv\u00e9 : quels outils du parc embarquent d\u00e9sormais une fonction d&rsquo;IA, qu&rsquo;envoient-ils, o\u00f9, et sous quelles conditions contractuelles.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ffafed8 elementor-widget elementor-widget-text-editor\" data-id=\"ffafed8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>POUR COMMENCER<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eb8598a elementor-widget elementor-widget-text-editor\" data-id=\"eb8598a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Trois chantiers qui n&rsquo;attendent aucune norme<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-34d80a0 elementor-widget elementor-widget-text-editor\" data-id=\"34d80a0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Dresser l&rsquo;inventaire, une demi-journ\u00e9e avec les \u00e9quipes applicatives.<\/b> Trois colonnes suffisent : les syst\u00e8mes que vous d\u00e9veloppez, ceux que vous consommez comme service, et ceux qui se sont activ\u00e9s dans vos outils existants. Pour chacun, les donn\u00e9es re\u00e7ues et la personne qui l&rsquo;a valid\u00e9. C&rsquo;est le point de d\u00e9part de toute d\u00e9marche, de gouvernance comme de s\u00e9curit\u00e9.<\/p><p><b>Poser les bonnes questions \u00e0 vos fournisseurs, d\u00e8s le prochain comit\u00e9 de suivi.<\/b> Sous quel droit tombent les donn\u00e9es trait\u00e9es, o\u00f9 s&rsquo;ex\u00e9cute le mod\u00e8le, qui d\u00e9cide de ses mises \u00e0 jour, et que pourrez-vous prouver le jour o\u00f9 un auditeur vous le demandera. Ces questions valent mieux qu&rsquo;une clause g\u00e9n\u00e9rale sur la s\u00e9curit\u00e9.<\/p><p><b>Tester, et pas seulement documenter, en commen\u00e7ant par un seul syst\u00e8me.<\/b>Un mod\u00e8le se met \u00e0 l&rsquo;\u00e9preuve comme une application : sc\u00e9narios d&rsquo;entr\u00e9es adverses, tentatives d&rsquo;injection de prompt, v\u00e9rification de ce qui sort du syst\u00e8me. C&rsquo;est le point o\u00f9 la plupart des organisations manquent encore de comp\u00e9tences, et c&rsquo;est aussi celui qui distingue une gouvernance affich\u00e9e d&rsquo;une s\u00e9curit\u00e9 r\u00e9elle.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-90fdf99 elementor-widget elementor-widget-text-editor\" data-id=\"90fdf99\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>EN CONCLUSION<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5d9200f elementor-widget elementor-widget-text-editor\" data-id=\"5d9200f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Un document ne d\u00e9fend rien<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c8e6695 elementor-widget elementor-widget-text-editor\" data-id=\"c8e6695\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>La gouvernance a pris de l&rsquo;avance pour une raison b\u00eate : elle produit des preuves visibles, des documents qu&rsquo;on peut montrer. La s\u00e9curit\u00e9 d&rsquo;un mod\u00e8le, elle, ne se voit nulle part tant que personne ne l&rsquo;a mise \u00e0 l&rsquo;\u00e9preuve, et elle se voit soudain tr\u00e8s bien le jour o\u00f9 quelqu&rsquo;un d&rsquo;autre s&rsquo;en charge.<\/p><p>Ces r\u00e9f\u00e9rentiels forment d\u00e9sormais un ensemble coh\u00e9rent, \u00e0 condition de les lire pour ce qu&rsquo;ils sont : des guides. Ce sont vos \u00e9quipes qui d\u00e9cident, testent et assument. Aucun document ne le fera \u00e0 leur place.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e052eb1 e-con-full e-flex e-con e-child\" data-id=\"e052eb1\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b0a191f elementor-widget__width-initial elementor-author-box--image-valign-middle elementor-widget elementor-widget-author-box\" data-id=\"b0a191f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"author-box.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-author-box\">\n\t\t\t\t\t\t\t<a href=\"http:\/\/formation@acgcybersecurity.fr%20\" class=\"elementor-author-box__avatar\">\n\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/09\/Pasted-2026-10-07-at-10.16.40-AM-300x300.png\" alt=\"Picture of  Chakib Ameur \" loading=\"lazy\">\n\t\t\t\t<\/a>\n\t\t\t\n\t\t\t<div class=\"elementor-author-box__text\">\n\t\t\t\t\t\t\t\t\t<a href=\"http:\/\/formation@acgcybersecurity.fr%20\">\n\t\t\t\t\t\t<h4 class=\"elementor-author-box__name\">\n\t\t\t\t\t\t\t Chakib Ameur \t\t\t\t\t\t<\/h4>\n\t\t\t\t\t<\/a>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-author-box__bio\">\n\t\t\t\t\t\t<p>Consultant senior, expert et formateur chez ACG Cybersecurity. Il accompagne les organisations sur la gouvernance et la s\u00e9curit\u00e9 de leurs syst\u00e8mes d'information, et anime les formations li\u00e9es aux syst\u00e8mes de management, dont l'ISO\/IEC 42001 et l'AI Act.<\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-64c506b elementor-widget elementor-widget-text-editor\" data-id=\"64c506b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Sources<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7cda5b4 elementor-widget elementor-widget-text-editor\" data-id=\"7cda5b4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ul><li>ISO\/IEC 42001:2023, syst\u00e8me de management de l&rsquo;intelligence artificielle.<\/li><li>ISO\/IEC 27090, traitement des menaces et compromissions visant les syst\u00e8mes d&rsquo;IA, en cours de publication.<\/li><li>R\u00e8glement (UE) 2026\/1744 dit Digital Omnibus sur l&rsquo;IA, publi\u00e9 au JOUE le 24 juillet 2026, et calendrier officiel de l&rsquo;AI Act.<\/li><li>NIST AI Risk Management Framework, OWASP Top 10 for LLM Applications, MITRE ATLAS.<\/li><li>Analyses sectorielles sur l&rsquo;articulation de ces cadres, 2026.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d1b93b0 elementor-widget elementor-widget-text-editor\" data-id=\"d1b93b0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>ACG Cybersecurity est qualifi\u00e9 PASSI par l&rsquo;ANSSI et certifi\u00e9 ISO\/CEI 27001:2022. ACG CyberAcademy est certifi\u00e9 Qualiopi. Contact : contact@acgcybersecurity.fr pour l&rsquo;audit et le conseil, formation@acgcybersecurity.fr pour la formation.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c19f6ea e-con-full elementor-hidden-desktop elementor-hidden-tablet e-flex e-con e-child\" data-id=\"c19f6ea\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-576243a e-con-full elementor-hidden-tablet elementor-hidden-mobile e-flex e-con e-child\" data-id=\"576243a\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;sticky&quot;:&quot;top&quot;,&quot;sticky_on&quot;:[&quot;desktop&quot;],&quot;sticky_offset&quot;:100,&quot;sticky_parent&quot;:&quot;yes&quot;,&quot;sticky_effects_offset&quot;:0,&quot;sticky_anchor_link_offset&quot;:0}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c732ae6 eael-wpforms-labels-yes eael-wpforms-form-button-custom elementor-widget elementor-widget-eael-wpforms\" data-id=\"c732ae6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"eael-wpforms.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t            <div class=\"eael-contact-form eael-wpforms title-description-hide eael-custom-radio-checkbox eael-wpforms-align-center\">\n                                    <div class=\"eael-wpforms-heading\">\n                                                                    <\/div>\n                                <div class=\"wpforms-container wpforms-container-full wpforms-render-modern\" id=\"wpforms-27017\"><form id=\"wpforms-form-27017\" class=\"wpforms-validate wpforms-form wpforms-ajax-form\" data-formid=\"27017\" method=\"post\" enctype=\"multipart\/form-data\" action=\"\/en\/wp-json\/wp\/v2\/posts\/30890\" data-token=\"f5d624de36e59b97ab834abc7b1d02f8\" data-token-time=\"1791671568\"><noscript class=\"wpforms-error-noscript\">Please enable JavaScript in your browser to complete this form.<\/noscript><div id=\"wpforms-error-noscript\" style=\"display: none;\">Please enable JavaScript in your browser to complete this form.<\/div><div class=\"wpforms-field-container\"><div id=\"wpforms-27017-field_1-container\" class=\"wpforms-field wpforms-field-name\" data-field-id=\"1\"><label class=\"wpforms-field-label\" for=\"wpforms-27017-field_1\">Nom <span class=\"wpforms-required-label\" aria-hidden=\"true\">*<\/span><\/label><input type=\"text\" id=\"wpforms-27017-field_1\" class=\"wpforms-field-small wpforms-field-required\" name=\"wpforms[fields][1]\" aria-errormessage=\"wpforms-27017-field_1-error\" required><\/div><div id=\"wpforms-27017-field_4-container\" class=\"wpforms-field wpforms-field-name\" data-field-id=\"4\"><label class=\"wpforms-field-label\" for=\"wpforms-27017-field_4\">Pr\u00e9nom <span class=\"wpforms-required-label\" aria-hidden=\"true\">*<\/span><\/label><input type=\"text\" id=\"wpforms-27017-field_4\" class=\"wpforms-field-small wpforms-field-required\" name=\"wpforms[fields][4]\" aria-errormessage=\"wpforms-27017-field_4-error\" required><\/div>\t\t<div id=\"wpforms-27017-field_3-container\"\n\t\t\tclass=\"wpforms-field wpforms-field-text\"\n\t\t\tdata-field-type=\"text\"\n\t\t\tdata-field-id=\"3\"\n\t\t\t>\n\t\t\t<label class=\"wpforms-field-label\" for=\"wpforms-27017-field_3\" >Nom T\u00e9l\u00e9phone email<\/label>\n\t\t\t<input type=\"text\" id=\"wpforms-27017-field_3\" class=\"wpforms-field-medium\" name=\"wpforms[fields][3]\" >\n\t\t<\/div>\n\t\t<div id=\"wpforms-27017-field_5-container\" class=\"wpforms-field wpforms-field-email\" data-field-id=\"5\"><label class=\"wpforms-field-label\" for=\"wpforms-27017-field_5\">T\u00e9l\u00e9phone professionnel  <span class=\"wpforms-required-label\" aria-hidden=\"true\">*<\/span><\/label><input type=\"email\" id=\"wpforms-27017-field_5\" class=\"wpforms-field-small wpforms-field-required\" name=\"wpforms[fields][5]\" spellcheck=\"false\" aria-errormessage=\"wpforms-27017-field_5-error\" required><\/div><div id=\"wpforms-27017-field_2-container\" class=\"wpforms-field wpforms-field-email\" data-field-id=\"2\"><label class=\"wpforms-field-label\" for=\"wpforms-27017-field_2\">Adresse email <span class=\"wpforms-required-label\" aria-hidden=\"true\">*<\/span><\/label><input type=\"email\" id=\"wpforms-27017-field_2\" class=\"wpforms-field-small wpforms-field-required\" name=\"wpforms[fields][2]\" spellcheck=\"false\" aria-errormessage=\"wpforms-27017-field_2-error\" required><\/div><script>\n\t\t\t\t( function() {\n\t\t\t\t\tconst style = document.createElement( 'style' );\n\t\t\t\t\tstyle.appendChild( document.createTextNode( '#wpforms-27017-field_3-container { position: absolute !important; overflow: hidden !important; display: inline !important; height: 1px !important; width: 1px !important; z-index: -1000 !important; padding: 0 !important; } #wpforms-27017-field_3-container input { visibility: hidden; } #wpforms-conversational-form-page #wpforms-27017-field_3-container label { counter-increment: none; }' ) );\n\t\t\t\t\tdocument.head.appendChild( style );\n\t\t\t\t\tdocument.currentScript?.remove();\n\t\t\t\t} )();\n\t\t\t<\/script><\/div><!-- .wpforms-field-container --><div class=\"wpforms-submit-container\" ><input type=\"hidden\" name=\"wpforms[id]\" value=\"27017\"><input type=\"hidden\" name=\"wpforms[time_token]\" value=\"1791671568.c4b60bbc0ad2acb9bcd845dfc5a9b24c67dc73fa6b626c6f9c212540ef1bdc1d\"><input type=\"hidden\" name=\"page_title\" value=\"\"><input type=\"hidden\" name=\"page_url\" value=\"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/posts\/30890\"><input type=\"hidden\" name=\"url_referer\" value=\"\"><button type=\"submit\" name=\"wpforms[submit]\" id=\"wpforms-submit-27017\" class=\"wpforms-submit\" data-alt-text=\"Sending...\" data-submit-text=\"T\u00e9l\u00e9charger le catalogue\" aria-live=\"assertive\" value=\"wpforms-submit\">T\u00e9l\u00e9charger le catalogue<\/button><img decoding=\"async\" src=\"https:\/\/acgcyberacademy.fr\/wp-content\/plugins\/wpforms-lite\/assets\/images\/submit-spin.svg\" class=\"wpforms-submit-spinner\" style=\"display: none;\" width=\"26\" height=\"26\" alt=\"Loading\"><\/div><\/form><\/div>  <!-- .wpforms-container -->            <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-36442a2 e-con-full elementor-hidden-desktop elementor-hidden-tablet e-flex e-con e-child\" data-id=\"36442a2\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2fea0f9 elementor-widget elementor-widget-spacer\" data-id=\"2fea0f9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-05090da elementor-widget elementor-widget-text-editor\" data-id=\"05090da\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"meta\"><div class=\"wrap\">Chakib Ameur \u00b7 7 Octobre 2026 \u00b7 Lecture 6 min<\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1cf8fdc elementor-widget elementor-widget-image\" data-id=\"1cf8fdc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"800\" height=\"343\" src=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2024\/03\/couverture_1600x686-1024x439.jpg\" class=\"attachment-large size-large wp-image-30891\" alt=\"\" srcset=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2024\/03\/couverture_1600x686-1024x439.jpg 1024w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2024\/03\/couverture_1600x686-300x129.jpg 300w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2024\/03\/couverture_1600x686-768x329.jpg 768w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2024\/03\/couverture_1600x686-1536x659.jpg 1536w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2024\/03\/couverture_1600x686-18x8.jpg 18w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2024\/03\/couverture_1600x686.jpg 1600w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-02318a2 elementor-widget elementor-widget-text-editor\" data-id=\"02318a2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"color: #003366;\">S\u00e9curit\u00e9 de l&rsquo;IA : ce que les normes couvrent,<\/span> <span style=\"color: #993300;\">et ce qu&rsquo;elles laissent \u00e0 votre charge<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f5d2afe elementor-widget elementor-widget-text-editor\" data-id=\"f5d2afe\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"chapeau\"><p>ISO\/IEC 42001, ISO\/IEC 27090, NIST AI RMF, OWASP, MITRE ATLAS, sans compter l&rsquo;AI Act. L&rsquo;offre normative a rattrap\u00e9 son retard. Reste \u00e0 savoir qui fait quoi, et ce qui n&rsquo;est couvert par aucun de ces textes.<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e829d3d elementor-widget elementor-widget-text-editor\" data-id=\"e829d3d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>En salle de formation comme en mission, la s\u00e9quence se r\u00e9p\u00e8te. On me montre une politique d&rsquo;usage de l&rsquo;IA, un registre des syst\u00e8mes, parfois le calendrier d&rsquo;une certification. Puis je pose une question simple : qui, chez vous, a essay\u00e9 de faire dire \u00e0 ce syst\u00e8me quelque chose qu&rsquo;il n&rsquo;aurait pas d\u00fb dire ?<\/p><p>Cet article donne une carte. Qui couvre quoi parmi les cinq r\u00e9f\u00e9rentiels disponibles, ce que l&rsquo;AI Act impose et \u00e0 quelle date, et surtout un terrain qu&rsquo;aucun d&rsquo;entre eux ne traite : l&rsquo;IA qui entre dans l&rsquo;entreprise sans projet, par la mise \u00e0 jour d&rsquo;un outil d\u00e9j\u00e0 valid\u00e9.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-19c2e85 elementor-widget elementor-widget-text-editor\" data-id=\"19c2e85\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>PREMI\u00c8RE ID\u00c9E RE\u00c7UE<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fb6a3f4 elementor-widget elementor-widget-text-editor\" data-id=\"fb6a3f4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Ce qu&rsquo;une certification ne couvre pas<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-aa03e84 elementor-widget elementor-widget-text-editor\" data-id=\"aa03e84\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>L&rsquo;ISO\/IEC 42001, publi\u00e9e en d\u00e9cembre 2023, est la premi\u00e8re norme internationale de syst\u00e8me de management d\u00e9di\u00e9e \u00e0 l&rsquo;intelligence artificielle. Elle aide une organisation \u00e0 \u00e9tablir, mettre en \u0153uvre et am\u00e9liorer un syst\u00e8me de management de l&rsquo;IA, afin que celle-ci soit d\u00e9velopp\u00e9e et utilis\u00e9e de fa\u00e7on responsable, s\u00fbre et transparente. Elle est certifiable, donc opposable \u00e0 un client, \u00e0 un donneur d&rsquo;ordre ou \u00e0 un auditeur.<\/p><p>C&rsquo;est pr\u00e9cis\u00e9ment ce qui fait sa force et sa limite. Les analyses du secteur le notent sans d\u00e9tour : ni le NIST AI RMF ni l&rsquo;ISO\/IEC 42001 ne prescrivent de contr\u00f4les techniques sp\u00e9cifiques, notamment pour les agents. Ils structurent la d\u00e9cision, pas la d\u00e9fense.<\/p><p>Autrement dit, une organisation peut \u00eatre exemplaire sur sa gouvernance et n&rsquo;avoir jamais soumis un seul mod\u00e8le \u00e0 un test d&rsquo;attaque.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-836b0a0 elementor-widget elementor-widget-text-editor\" data-id=\"836b0a0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>LA MARCHE MANQUANTE<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-771e6a4 elementor-widget elementor-widget-text-editor\" data-id=\"771e6a4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Une norme pour le point de vue de l&rsquo;attaquant<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f00fd35 elementor-widget elementor-widget-text-editor\" data-id=\"f00fd35\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>L&rsquo;ISO\/IEC 27090 traite des menaces et des situations susceptibles de compromettre les syst\u00e8mes d&rsquo;intelligence artificielle. Elle est au stade des derni\u00e8res \u00e9tapes de publication. Elle appartient \u00e0 la famille de l&rsquo;ISO\/IEC 27001 et de l&rsquo;ISO\/IEC 27002, dont elle prolonge la logique vers les sp\u00e9cificit\u00e9s de l&rsquo;IA.<\/p><p>Son objet est op\u00e9rationnel. Identifier les menaces propres \u00e0 un syst\u00e8me d&rsquo;IA sur tout son cycle de vie, en comprendre les cons\u00e9quences, proposer des pistes de d\u00e9tection et d&rsquo;att\u00e9nuation. Les familles document\u00e9es publiquement sont les suivantes :<\/p><ul><li>l&#8217;empoisonnement des donn\u00e9es d&rsquo;entra\u00eenement, qui alt\u00e8re le comportement du mod\u00e8le \u00e0 la source ;<\/li><li>les entr\u00e9es adverses, construites pour induire le mod\u00e8le en erreur ;<\/li><li>l&rsquo;extraction de mod\u00e8le, qui permet d&rsquo;en reconstituer une copie \u00e0 force de requ\u00eates ;<\/li><li>l&rsquo;inf\u00e9rence d&rsquo;appartenance, qui r\u00e9v\u00e8le si une donn\u00e9e figurait dans le jeu d&rsquo;entra\u00eenement ;<\/li><li>l&rsquo;injection de prompt, qui d\u00e9tourne les instructions donn\u00e9es \u00e0 un assistant.<\/li><\/ul><p>Un exemple rend la derni\u00e8re concr\u00e8te. Une entreprise d\u00e9ploie un assistant interne branch\u00e9 sur sa base documentaire. Un document d\u00e9pos\u00e9 par un tiers, un devis, un CV, un compte rendu, contient une consigne r\u00e9dig\u00e9e \u00e0 l&rsquo;attention du mod\u00e8le. L&rsquo;assistant la lit comme une instruction, et non comme du contenu. Personne n&rsquo;a forc\u00e9 de compte, aucune alerte ne se d\u00e9clenche.<\/p><p>C&rsquo;est le point qui change la fa\u00e7on de surveiller : dans la plupart de ces cas, l&rsquo;acc\u00e8s est autoris\u00e9 et le trafic ressemble \u00e0 un usage normal. Les outils de d\u00e9tection con\u00e7us pour rep\u00e9rer une intrusion n&rsquo;ont pas grand-chose \u00e0 signaler.<\/p><p>Derni\u00e8re pr\u00e9cision, utile pour \u00e9viter un malentendu courant : il s&rsquo;agit d&rsquo;un guide, pas d&rsquo;un r\u00e9f\u00e9rentiel de certification. On ne sera pas \u00ab certifi\u00e9 27090 \u00bb.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-8e5f147 e-con-full e-flex e-con e-child\" data-id=\"8e5f147\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f29810a elementor-widget elementor-widget-text-editor\" data-id=\"f29810a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Ce que couvre chacune<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3d99db0 elementor-widget elementor-widget-text-editor\" data-id=\"3d99db0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Elles se compl\u00e8tent et ne se remplacent pas.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-fa0b008 e-con-full e-grid e-con e-child\" data-id=\"fa0b008\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3b47b19 elementor-widget elementor-widget-text-editor\" data-id=\"3b47b19\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>ISO\/IEC 42001<\/b><\/p><ul><li>Syst\u00e8me de management de l&rsquo;IA<\/li><li>R\u00f4les, politiques, registre, preuves<\/li><li>Certifiable, donc opposable<\/li><li>R\u00e9pond \u00e0 : qui d\u00e9cide, et sur quelle base<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fed79da elementor-widget elementor-widget-text-editor\" data-id=\"fed79da\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>ISO\/IEC 27090<\/b><\/p><ul><li>Menaces visant les syst\u00e8mes d&rsquo;IA<\/li><li>Cycle de vie, d\u00e9tection, att\u00e9nuation<\/li><li>Guide, non certifiable<\/li><li>R\u00e9pond \u00e0 : contre quoi on se prot\u00e8ge<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f593eb3 elementor-widget elementor-widget-image\" data-id=\"f593eb3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"446\" src=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/09\/photo_interieure-1024x571.png\" class=\"attachment-large size-large wp-image-30895\" alt=\"\" srcset=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/09\/photo_interieure-1024x571.png 1024w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/09\/photo_interieure-300x167.png 300w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/09\/photo_interieure-768x428.png 768w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/09\/photo_interieure-1536x857.png 1536w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/09\/photo_interieure-18x10.png 18w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/09\/photo_interieure.png 1800w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-29513d0 elementor-widget elementor-widget-text-editor\" data-id=\"29513d0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>LA CARTE<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-49479fa elementor-widget elementor-widget-text-editor\" data-id=\"49479fa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>S&rsquo;y retrouver dans les sigles<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a9ea391 elementor-widget elementor-widget-text-editor\" data-id=\"a9ea391\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Quand une \u00e9quipe d\u00e9couvre le sujet, sa difficult\u00e9 n&rsquo;est pas de trouver des r\u00e9f\u00e9rences, c&rsquo;est d&rsquo;en avoir trop. Les sigles tombent en rafale et finissent par se ressembler.<\/p><p>Une image aide \u00e0 les s\u00e9parer. Pensez \u00e0 un b\u00e2timent. L&rsquo;OWASP vous dit o\u00f9 sont les fen\u00eatres mal ferm\u00e9es. MITRE ATLAS vous raconte comment un cambrioleur s&rsquo;y prend, \u00e9tage par \u00e9tage. Le NIST AI RMF et l&rsquo;ISO\/IEC 42001 \u00e9crivent le r\u00e8glement int\u00e9rieur et d\u00e9signent qui garde les cl\u00e9s. L&rsquo;ISO\/IEC 27090, elle, d\u00e9crit l&rsquo;alarme et les capteurs. Et l&rsquo;AI Act, dans ce d\u00e9cor, joue le r\u00f4le du code de la construction : il rend certaines de ces exigences obligatoires, avec des \u00e9ch\u00e9ances.<\/p><p>Aucun de ces textes ne remplace les autres, et c&rsquo;est bien ce qui d\u00e9route au premier abord.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-37221dd e-con-full e-flex e-con e-child\" data-id=\"37221dd\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-006914d elementor-widget elementor-widget-text-editor\" data-id=\"006914d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>\u00c0 quoi sert quoi<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-dec8109 elementor-widget elementor-widget-text-editor\" data-id=\"dec8109\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Aucun ne remplace les autres. Ils se superposent.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b58dbb7 e-con-full e-grid e-con e-child\" data-id=\"b58dbb7\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0685998 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"0685998\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>OWASP LLM Top 10<\/b><\/p><p>Les vuln\u00e9rabilit\u00e9s applicatives des syst\u00e8mes \u00e0 base de mod\u00e8les de langage. Pour les \u00e9quipes de d\u00e9veloppement et les revues de code.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8fc3fa1 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"8fc3fa1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>MITRE ATLAS<\/b><\/p><p>Le catalogue des tactiques et techniques adverses visant l&rsquo;IA. Pour la mod\u00e9lisation de menaces et les tests.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c56a927 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"c56a927\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>NIST AI RMF et ISO\/IEC 42001<\/b><\/p><p>La gouvernance et la gestion du risque, sur tout le cycle de vie. Pour l&rsquo;organisation et ses preuves.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-26728f9 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"26728f9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>ISO\/IEC 27090<\/b><\/p><p>Les menaces propres aux syst\u00e8mes d&rsquo;IA et leurs contre-mesures. Le cha\u00eenon entre la gouvernance et la technique.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a06fb8b elementor-widget elementor-widget-text-editor\" data-id=\"a06fb8b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>LE CADRE L\u00c9GAL<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-326bace elementor-widget elementor-widget-text-editor\" data-id=\"326bace\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Le calendrier a boug\u00e9, pas l&rsquo;exigence<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cd4ec20 elementor-widget elementor-widget-text-editor\" data-id=\"cd4ec20\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Le r\u00e8glement europ\u00e9en sur l&rsquo;IA s&rsquo;applique par \u00e9tapes, et son calendrier a boug\u00e9 cet \u00e9t\u00e9. Le r\u00e8glement (UE) 2026\/1744, publi\u00e9 au Journal officiel de l&rsquo;Union le 24 juillet 2026, a repouss\u00e9 les obligations des syst\u00e8mes \u00e0 haut risque. Report n&rsquo;est pas suspension : les interdictions, l&rsquo;obligation de ma\u00eetrise de l&rsquo;IA, les r\u00e8gles des mod\u00e8les \u00e0 usage g\u00e9n\u00e9ral, la transparence et les pouvoirs de sanction s&rsquo;appliquent d\u00e9j\u00e0.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-045f250 e-con-full e-flex e-con e-child\" data-id=\"045f250\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1c518f1 elementor-widget elementor-widget-text-editor\" data-id=\"1c518f1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>AI Act, les \u00e9tapes qui comptent<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4f51917 elementor-widget elementor-widget-text-editor\" data-id=\"4f51917\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Calendrier au 5 octobre 2026, apr\u00e8s le r\u00e8glement (UE) 2026\/1744.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0350a85 e-con-full e-grid e-con e-child\" data-id=\"0350a85\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-f03e316 e-con-full e-flex e-con e-child\" data-id=\"f03e316\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e29f149 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"e29f149\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><span class=\"d\">2 f\u00e9vrier 2025<\/span><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-38876b1 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"38876b1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Interdictions et ma\u00eetrise de l&rsquo;IA<\/b><\/p><p>Pratiques interdites applicables, et obligation de former les personnes qui utilisent ou d\u00e9ploient des syst\u00e8mes d&rsquo;IA.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9e73e39 e-con-full e-flex e-con e-child\" data-id=\"9e73e39\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1f57609 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"1f57609\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><span class=\"d\">2 ao\u00fbt 2025<\/span><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-787bfab elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"787bfab\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Mod\u00e8les \u00e0 usage g\u00e9n\u00e9ral<\/b><\/p><p>Obligations applicables aux fournisseurs de mod\u00e8les d&rsquo;IA \u00e0 usage g\u00e9n\u00e9ral, et mise en place de la gouvernance europ\u00e9enne.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a14ad0b e-con-full e-flex e-con e-child\" data-id=\"a14ad0b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-913930f elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"913930f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><span class=\"d\">2 ao\u00fbt 2026<\/span><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-56a9928 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"56a9928\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Transparence et sanctions<\/b><\/p><p>Obligations de transparence applicables, et pouvoirs de sanction des autorit\u00e9s nationales.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-4a14c59 e-con-full e-flex e-con e-child\" data-id=\"4a14c59\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3c5a00c elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"3c5a00c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"color: #993300;\"><strong>2 d\u00e9cembre 2027<\/strong><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-38fa4d6 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"38fa4d6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Haut risque, annexe III<\/b><\/p><p>Syst\u00e8mes autonomes \u00e0 haut risque, dont la biom\u00e9trie, l&#8217;emploi, le cr\u00e9dit ou l&rsquo;\u00e9ducation. \u00c9ch\u00e9ance report\u00e9e par le r\u00e8glement 2026\/1744.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-dd89441 e-con-full e-flex e-con e-child\" data-id=\"dd89441\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-78953e1 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"78953e1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"color: #993300;\"><strong><span class=\"d\">2 ao\u00fbt 2028<\/span><\/strong><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a2840c9 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"a2840c9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Haut risque, annexe I<\/b><\/p><p>Syst\u00e8mes d&rsquo;IA int\u00e9gr\u00e9s \u00e0 des produits d\u00e9j\u00e0 soumis \u00e0 une r\u00e9glementation sectorielle. M\u00eame report.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1706160 elementor-widget elementor-widget-text-editor\" data-id=\"1706160\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Le d\u00e9lai suppl\u00e9mentaire porte donc sur la conformit\u00e9 des syst\u00e8mes \u00e0 haut risque. Pas sur la capacit\u00e9 \u00e0 expliquer ce que fait votre IA, ni sur la responsabilit\u00e9 en cas d&rsquo;incident.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c278f70 elementor-widget elementor-widget-text-editor\" data-id=\"c278f70\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>L&rsquo;ANGLE MORT<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b1d366d elementor-widget elementor-widget-text-editor\" data-id=\"b1d366d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>L&rsquo;IA entr\u00e9e par la petite porte<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-77484ca elementor-widget elementor-widget-text-editor\" data-id=\"77484ca\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Tous les cadres \u00e9voqu\u00e9s jusqu&rsquo;ici supposent un projet identifi\u00e9, avec un porteur et un p\u00e9rim\u00e8tre. Or une partie de l&rsquo;IA entre dans l&rsquo;entreprise par une autre porte : la mise \u00e0 jour d&rsquo;un outil d\u00e9j\u00e0 valid\u00e9. La messagerie, le CRM, la suite bureautique, le service d&rsquo;assistance. Une fonction est activ\u00e9e, parfois par d\u00e9faut, et des donn\u00e9es partent vers un mod\u00e8le que personne n&rsquo;a \u00e9valu\u00e9.<\/p><p>Ce shadow AI ne se traite pas en interdisant, et pas davantage en r\u00e9digeant une politique suppl\u00e9mentaire. Il se traite en rouvrant ce qui a d\u00e9j\u00e0 \u00e9t\u00e9 approuv\u00e9 : quels outils du parc embarquent d\u00e9sormais une fonction d&rsquo;IA, qu&rsquo;envoient-ils, o\u00f9, et sous quelles conditions contractuelles.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2824135 elementor-widget elementor-widget-text-editor\" data-id=\"2824135\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>POUR COMMENCER<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9c0932a elementor-widget elementor-widget-text-editor\" data-id=\"9c0932a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Trois chantiers qui n&rsquo;attendent aucune norme<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c4aa51d elementor-widget elementor-widget-text-editor\" data-id=\"c4aa51d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Dresser l&rsquo;inventaire, une demi-journ\u00e9e avec les \u00e9quipes applicatives.<\/b> Trois colonnes suffisent : les syst\u00e8mes que vous d\u00e9veloppez, ceux que vous consommez comme service, et ceux qui se sont activ\u00e9s dans vos outils existants. Pour chacun, les donn\u00e9es re\u00e7ues et la personne qui l&rsquo;a valid\u00e9. C&rsquo;est le point de d\u00e9part de toute d\u00e9marche, de gouvernance comme de s\u00e9curit\u00e9.<\/p><p><b>Poser les bonnes questions \u00e0 vos fournisseurs, d\u00e8s le prochain comit\u00e9 de suivi.<\/b> Sous quel droit tombent les donn\u00e9es trait\u00e9es, o\u00f9 s&rsquo;ex\u00e9cute le mod\u00e8le, qui d\u00e9cide de ses mises \u00e0 jour, et que pourrez-vous prouver le jour o\u00f9 un auditeur vous le demandera. Ces questions valent mieux qu&rsquo;une clause g\u00e9n\u00e9rale sur la s\u00e9curit\u00e9.<\/p><p><b>Tester, et pas seulement documenter, en commen\u00e7ant par un seul syst\u00e8me.<\/b>Un mod\u00e8le se met \u00e0 l&rsquo;\u00e9preuve comme une application : sc\u00e9narios d&rsquo;entr\u00e9es adverses, tentatives d&rsquo;injection de prompt, v\u00e9rification de ce qui sort du syst\u00e8me. C&rsquo;est le point o\u00f9 la plupart des organisations manquent encore de comp\u00e9tences, et c&rsquo;est aussi celui qui distingue une gouvernance affich\u00e9e d&rsquo;une s\u00e9curit\u00e9 r\u00e9elle.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bd6cd49 elementor-widget elementor-widget-text-editor\" data-id=\"bd6cd49\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>EN CONCLUSION<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-08b3ec2 elementor-widget elementor-widget-text-editor\" data-id=\"08b3ec2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Un document ne d\u00e9fend rien<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f007c1c elementor-widget elementor-widget-text-editor\" data-id=\"f007c1c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>La gouvernance a pris de l&rsquo;avance pour une raison b\u00eate : elle produit des preuves visibles, des documents qu&rsquo;on peut montrer. La s\u00e9curit\u00e9 d&rsquo;un mod\u00e8le, elle, ne se voit nulle part tant que personne ne l&rsquo;a mise \u00e0 l&rsquo;\u00e9preuve, et elle se voit soudain tr\u00e8s bien le jour o\u00f9 quelqu&rsquo;un d&rsquo;autre s&rsquo;en charge.<\/p><p>Ces r\u00e9f\u00e9rentiels forment d\u00e9sormais un ensemble coh\u00e9rent, \u00e0 condition de les lire pour ce qu&rsquo;ils sont : des guides. Ce sont vos \u00e9quipes qui d\u00e9cident, testent et assument. Aucun document ne le fera \u00e0 leur place.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f506eb7 e-con-full e-flex e-con e-child\" data-id=\"f506eb7\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-24a8cc8 elementor-widget__width-initial elementor-author-box--image-valign-middle elementor-widget elementor-widget-author-box\" data-id=\"24a8cc8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"author-box.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-author-box\">\n\t\t\t\t\t\t\t<a href=\"http:\/\/formation@acgcybersecurity.fr%20\" class=\"elementor-author-box__avatar\">\n\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/Newsletter-banners-1-300x300.png\" alt=\"Picture of  Chakib Ameur \" loading=\"lazy\">\n\t\t\t\t<\/a>\n\t\t\t\n\t\t\t<div class=\"elementor-author-box__text\">\n\t\t\t\t\t\t\t\t\t<a href=\"http:\/\/formation@acgcybersecurity.fr%20\">\n\t\t\t\t\t\t<h4 class=\"elementor-author-box__name\">\n\t\t\t\t\t\t\t Chakib Ameur \t\t\t\t\t\t<\/h4>\n\t\t\t\t\t<\/a>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-author-box__bio\">\n\t\t\t\t\t\t<p>Consultant senior, expert et formateur chez ACG Cybersecurity. Il accompagne les organisations sur la gouvernance et la s\u00e9curit\u00e9 de leurs syst\u00e8mes d'information, et anime les formations li\u00e9es aux syst\u00e8mes de management, dont l'ISO\/IEC 42001 et l'AI Act.<\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ed09acb elementor-widget elementor-widget-text-editor\" data-id=\"ed09acb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Sources<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7b8810e elementor-widget elementor-widget-text-editor\" data-id=\"7b8810e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ul><li>ISO\/IEC 42001:2023, syst\u00e8me de management de l&rsquo;intelligence artificielle.<\/li><li>ISO\/IEC 27090, traitement des menaces et compromissions visant les syst\u00e8mes d&rsquo;IA, en cours de publication.<\/li><li>R\u00e8glement (UE) 2026\/1744 dit Digital Omnibus sur l&rsquo;IA, publi\u00e9 au JOUE le 24 juillet 2026, et calendrier officiel de l&rsquo;AI Act.<\/li><li>NIST AI Risk Management Framework, OWASP Top 10 for LLM Applications, MITRE ATLAS.<\/li><li>Analyses sectorielles sur l&rsquo;articulation de ces cadres, 2026.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2f6b055 elementor-widget elementor-widget-text-editor\" data-id=\"2f6b055\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>ACG Cybersecurity est qualifi\u00e9 PASSI par l&rsquo;ANSSI et certifi\u00e9 ISO\/CEI 27001:2022. ACG CyberAcademy est certifi\u00e9 Qualiopi. Contact : contact@acgcybersecurity.fr pour l&rsquo;audit et le conseil, formation@acgcybersecurity.fr pour la formation.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Please enable JavaScript in your browser to complete this form.Please enable JavaScript in your browser to complete this form.Nom *Pr\u00e9nom *T\u00e9l\u00e9phone professionnel *Adresse email * T\u00e9l\u00e9charger le catalogue Chakib Ameur \u00b7 7 Octobre 2026 \u00b7 Lecture 6 min S\u00e9curit\u00e9 de l&rsquo;IA : ce que les normes couvrent, et ce qu&rsquo;elles laissent \u00e0 votre charge ISO\/IEC [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":30904,"comment_status":"closed","ping_status":"open","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"_acf_changed":false,"_glsr_average":0,"_glsr_ranking":0,"_glsr_reviews":0,"footnotes":""},"categories":[355],"tags":[368],"formateur":[],"class_list":["post-30890","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-article","tag-securite-de-lintelligence-artificielle"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>S\u00e9curit\u00e9 de l&#039;IA :ce que les normes couvrent, et ce qu&#039;elles laissent \u00e0 votre charge - ACG CyberAcademy<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/acgcyberacademy.fr\/en\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"S\u00e9curit\u00e9 de l&#039;IA :ce que les normes couvrent, et ce qu&#039;elles laissent \u00e0 votre charge - ACG CyberAcademy\" \/>\n<meta property=\"og:description\" content=\"Please enable JavaScript in your browser to complete this form.Please enable JavaScript in your browser to complete this form.Nom *Pr\u00e9nom *T\u00e9l\u00e9phone professionnel *Adresse email * T\u00e9l\u00e9charger le catalogue Chakib Ameur \u00b7 7 Octobre 2026 \u00b7 Lecture 6 min S\u00e9curit\u00e9 de l&rsquo;IA : ce que les normes couvrent, et ce qu&rsquo;elles laissent \u00e0 votre charge ISO\/IEC [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/acgcyberacademy.fr\/en\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/\" \/>\n<meta property=\"og:site_name\" content=\"ACG CyberAcademy\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-07T07:29:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-08T20:41:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/Newsletter-banners-.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1080\" \/>\n\t<meta property=\"og:image:height\" content=\"1080\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Maya\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Maya\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"19 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\\\/\"},\"author\":{\"name\":\"Maya\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#\\\/schema\\\/person\\\/a61f74bc461db55c34f542ebc827ffbd\"},\"headline\":\"S\u00e9curit\u00e9 de l&rsquo;IA :ce que les normes couvrent, et ce qu&rsquo;elles laissent \u00e0 votre charge\",\"datePublished\":\"2026-10-07T07:29:46+00:00\",\"dateModified\":\"2026-10-08T20:41:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\\\/\"},\"wordCount\":3747,\"publisher\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/acgcyberacademy.fr\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Newsletter-banners-.png\",\"keywords\":[\"S\u00e9curit\u00e9 de L'intelligence Artificielle\"],\"articleSection\":[\"Article\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\\\/\",\"url\":\"https:\\\/\\\/acgcyberacademy.fr\\\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\\\/\",\"name\":\"S\u00e9curit\u00e9 de l'IA :ce que les normes couvrent, et ce qu'elles laissent \u00e0 votre charge - ACG CyberAcademy\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/acgcyberacademy.fr\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Newsletter-banners-.png\",\"datePublished\":\"2026-10-07T07:29:46+00:00\",\"dateModified\":\"2026-10-08T20:41:06+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/acgcyberacademy.fr\\\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\\\/#primaryimage\",\"url\":\"https:\\\/\\\/acgcyberacademy.fr\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Newsletter-banners-.png\",\"contentUrl\":\"https:\\\/\\\/acgcyberacademy.fr\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Newsletter-banners-.png\",\"width\":1080,\"height\":1080},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/acgcyberacademy.fr\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"S\u00e9curit\u00e9 de l&#8217;IA :ce que les normes couvrent, et ce qu&#8217;elles laissent \u00e0 votre charge\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#website\",\"url\":\"https:\\\/\\\/acgcyberacademy.fr\\\/\",\"name\":\"ACG Cyber Academy\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/acgcyberacademy.fr\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#organization\",\"name\":\"ACG Cyber Academy\",\"url\":\"https:\\\/\\\/acgcyberacademy.fr\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/acgcyberacademy.fr\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/Untitled-15-2.png\",\"contentUrl\":\"https:\\\/\\\/acgcyberacademy.fr\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/Untitled-15-2.png\",\"width\":1080,\"height\":1080,\"caption\":\"ACG Cyber Academy\"},\"image\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/fr.linkedin.com\\\/company\\\/acg-cybersecurity\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#\\\/schema\\\/person\\\/a61f74bc461db55c34f542ebc827ffbd\",\"name\":\"Maya\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4ce769e531a368b215ab5f69e995a5c2ac8937ecc71295509417408fe823bd26?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4ce769e531a368b215ab5f69e995a5c2ac8937ecc71295509417408fe823bd26?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4ce769e531a368b215ab5f69e995a5c2ac8937ecc71295509417408fe823bd26?s=96&d=mm&r=g\",\"caption\":\"Maya\"},\"url\":\"https:\\\/\\\/acgcyberacademy.fr\\\/en\\\/author\\\/maya\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"S\u00e9curit\u00e9 de l'IA :ce que les normes couvrent, et ce qu'elles laissent \u00e0 votre charge - ACG CyberAcademy","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/acgcyberacademy.fr\/en\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/","og_locale":"en_GB","og_type":"article","og_title":"S\u00e9curit\u00e9 de l'IA :ce que les normes couvrent, et ce qu'elles laissent \u00e0 votre charge - ACG CyberAcademy","og_description":"Please enable JavaScript in your browser to complete this form.Please enable JavaScript in your browser to complete this form.Nom *Pr\u00e9nom *T\u00e9l\u00e9phone professionnel *Adresse email * T\u00e9l\u00e9charger le catalogue Chakib Ameur \u00b7 7 Octobre 2026 \u00b7 Lecture 6 min S\u00e9curit\u00e9 de l&rsquo;IA : ce que les normes couvrent, et ce qu&rsquo;elles laissent \u00e0 votre charge ISO\/IEC [&hellip;]","og_url":"https:\/\/acgcyberacademy.fr\/en\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/","og_site_name":"ACG CyberAcademy","article_published_time":"2026-10-07T07:29:46+00:00","article_modified_time":"2026-10-08T20:41:06+00:00","og_image":[{"width":1080,"height":1080,"url":"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/Newsletter-banners-.png","type":"image\/png"}],"author":"Maya","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Maya","Estimated reading time":"19 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/acgcyberacademy.fr\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/#article","isPartOf":{"@id":"https:\/\/acgcyberacademy.fr\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/"},"author":{"name":"Maya","@id":"https:\/\/acgcyberacademy.fr\/#\/schema\/person\/a61f74bc461db55c34f542ebc827ffbd"},"headline":"S\u00e9curit\u00e9 de l&rsquo;IA :ce que les normes couvrent, et ce qu&rsquo;elles laissent \u00e0 votre charge","datePublished":"2026-10-07T07:29:46+00:00","dateModified":"2026-10-08T20:41:06+00:00","mainEntityOfPage":{"@id":"https:\/\/acgcyberacademy.fr\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/"},"wordCount":3747,"publisher":{"@id":"https:\/\/acgcyberacademy.fr\/#organization"},"image":{"@id":"https:\/\/acgcyberacademy.fr\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/#primaryimage"},"thumbnailUrl":"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/Newsletter-banners-.png","keywords":["S\u00e9curit\u00e9 de L'intelligence Artificielle"],"articleSection":["Article"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/acgcyberacademy.fr\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/","url":"https:\/\/acgcyberacademy.fr\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/","name":"S\u00e9curit\u00e9 de l'IA :ce que les normes couvrent, et ce qu'elles laissent \u00e0 votre charge - ACG CyberAcademy","isPartOf":{"@id":"https:\/\/acgcyberacademy.fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/acgcyberacademy.fr\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/#primaryimage"},"image":{"@id":"https:\/\/acgcyberacademy.fr\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/#primaryimage"},"thumbnailUrl":"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/Newsletter-banners-.png","datePublished":"2026-10-07T07:29:46+00:00","dateModified":"2026-10-08T20:41:06+00:00","breadcrumb":{"@id":"https:\/\/acgcyberacademy.fr\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/acgcyberacademy.fr\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/acgcyberacademy.fr\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/#primaryimage","url":"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/Newsletter-banners-.png","contentUrl":"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/Newsletter-banners-.png","width":1080,"height":1080},{"@type":"BreadcrumbList","@id":"https:\/\/acgcyberacademy.fr\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/acgcyberacademy.fr\/"},{"@type":"ListItem","position":2,"name":"S\u00e9curit\u00e9 de l&#8217;IA :ce que les normes couvrent, et ce qu&#8217;elles laissent \u00e0 votre charge"}]},{"@type":"WebSite","@id":"https:\/\/acgcyberacademy.fr\/#website","url":"https:\/\/acgcyberacademy.fr\/","name":"ACG Cyber Academy","description":"","publisher":{"@id":"https:\/\/acgcyberacademy.fr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/acgcyberacademy.fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/acgcyberacademy.fr\/#organization","name":"ACG Cyber Academy","url":"https:\/\/acgcyberacademy.fr\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/acgcyberacademy.fr\/#\/schema\/logo\/image\/","url":"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2025\/10\/Untitled-15-2.png","contentUrl":"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2025\/10\/Untitled-15-2.png","width":1080,"height":1080,"caption":"ACG Cyber Academy"},"image":{"@id":"https:\/\/acgcyberacademy.fr\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/fr.linkedin.com\/company\/acg-cybersecurity"]},{"@type":"Person","@id":"https:\/\/acgcyberacademy.fr\/#\/schema\/person\/a61f74bc461db55c34f542ebc827ffbd","name":"Maya","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/4ce769e531a368b215ab5f69e995a5c2ac8937ecc71295509417408fe823bd26?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4ce769e531a368b215ab5f69e995a5c2ac8937ecc71295509417408fe823bd26?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4ce769e531a368b215ab5f69e995a5c2ac8937ecc71295509417408fe823bd26?s=96&d=mm&r=g","caption":"Maya"},"url":"https:\/\/acgcyberacademy.fr\/en\/author\/maya\/"}]}},"_links":{"self":[{"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/posts\/30890","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/comments?post=30890"}],"version-history":[{"count":0,"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/posts\/30890\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/media\/30904"}],"wp:attachment":[{"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/media?parent=30890"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/categories?post=30890"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/tags?post=30890"},{"taxonomy":"formateur","embeddable":true,"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/formateur?post=30890"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}