{"id":31902,"date":"2026-10-30T10:03:40","date_gmt":"2026-10-30T09:03:40","guid":{"rendered":"https:\/\/acgcyberacademy.fr\/?p=31902"},"modified":"2026-11-03T12:04:41","modified_gmt":"2026-11-03T11:04:41","slug":"fuites-de-donnees-et-securite-des-acces-applicatifs","status":"publish","type":"post","link":"https:\/\/acgcyberacademy.fr\/en\/fuites-de-donnees-et-securite-des-acces-applicatifs\/","title":{"rendered":"Fuites de donn\u00e9es et s\u00e9curit\u00e9 des acc\u00e8s applicatifs"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"31902\" class=\"elementor elementor-31902\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d0b379f e-flex e-con-boxed e-con e-child\" data-id=\"d0b379f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-30e237b e-con-full elementor-hidden-mobile e-flex e-con e-child\" data-id=\"30e237b\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-640c796 e-con-full elementor-hidden-tablet elementor-hidden-mobile e-flex e-con e-child\" data-id=\"640c796\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;sticky&quot;:&quot;top&quot;,&quot;sticky_on&quot;:[&quot;desktop&quot;],&quot;sticky_offset&quot;:100,&quot;sticky_parent&quot;:&quot;yes&quot;,&quot;sticky_effects_offset&quot;:0,&quot;sticky_anchor_link_offset&quot;:0}\">\n\t\t<div class=\"elementor-element elementor-element-152e727 e-con-full e-flex e-con e-child\" data-id=\"152e727\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-65099c0 elementor-widget elementor-widget-heading\" data-id=\"65099c0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Articles les plus lus<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-18fc9b2 elementor-grid-eael-col-1 elementor-grid-tablet-eael-col-2 elementor-grid-mobile-eael-col-1 elementor-widget elementor-widget-eael-post-grid\" data-id=\"18fc9b2\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;eael_post_grid_columns&quot;:&quot;eael-col-1&quot;,&quot;eael_post_grid_columns_tablet&quot;:&quot;eael-col-2&quot;,&quot;eael_post_grid_columns_mobile&quot;:&quot;eael-col-1&quot;}\" data-widget_type=\"eael-post-grid.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div id=\"eael-post-grid-18fc9b2\" class=\"eael-post-grid-container\">\n            <div class=\"eael-post-grid eael-post-appender eael-post-appender-18fc9b2 eael-post-grid-style-one\" data-layout-mode=\"masonry\"><article class=\"eael-grid-post  eael-post-grid-column eael-pg-post-31640 category-article tags-cybersecurite-et-ia\" data-id=\"31640\">\n        <div class=\"eael-grid-post-holder\">\n            <div class=\"eael-grid-post-holder-inner\"><div class=\"eael-entry-wrapper\"><header class=\"eael-entry-header\"><h2 class=\"eael-entry-title\"><a class=\"eael-grid-post-link\" href=\"https:\/\/acgcyberacademy.fr\/en\/cybersecurite-et-ia-vers-au-se-deplace-la-valeur-des-competences\/\" title=\"Cybers\u00e9curit\u00e9 et IA : vers a\u00f9 se d\u00e9place la valeur des comp\u00e9tences ?\u00a0\">Cybers\u00e9curit\u00e9 et IA : vers a\u00f9 se d\u00e9place la valeur des comp\u00e9tences ?\u00a0<\/a><\/h2><\/header><div class=\"eael-entry-content\">\n                        <div class=\"eael-grid-post-excerpt\"><a href=\"https:\/\/acgcyberacademy.fr\/en\/cybersecurite-et-ia-vers-au-se-deplace-la-valeur-des-competences\/\" class=\"eael-post-elements-readmore-btn\">Lire l\u2019article<\/a><\/div>\n                    <\/div><\/div><\/div>\n        <\/div>\n    <\/article><article class=\"eael-grid-post  eael-post-grid-column eael-pg-post-30890 category-article tags-securite-de-lintelligence-artificielle\" data-id=\"30890\">\n        <div class=\"eael-grid-post-holder\">\n            <div class=\"eael-grid-post-holder-inner\"><div class=\"eael-entry-wrapper\"><header class=\"eael-entry-header\"><h2 class=\"eael-entry-title\"><a class=\"eael-grid-post-link\" href=\"https:\/\/acgcyberacademy.fr\/en\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/\" title=\"S\u00e9curit\u00e9 de l&rsquo;IA :ce que les normes couvrent, et ce qu&rsquo;elles laissent \u00e0 votre charge\">S\u00e9curit\u00e9 de l&rsquo;IA :ce que les normes couvrent, et ce qu&rsquo;elles laissent \u00e0 votre charge<\/a><\/h2><\/header><div class=\"eael-entry-content\">\n                        <div class=\"eael-grid-post-excerpt\"><a href=\"https:\/\/acgcyberacademy.fr\/en\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/\" class=\"eael-post-elements-readmore-btn\">Lire l\u2019article<\/a><\/div>\n                    <\/div><\/div><\/div>\n        <\/div>\n    <\/article><article class=\"eael-grid-post  eael-post-grid-column eael-pg-post-30323 category-article tags-certifications\" data-id=\"30323\">\n        <div class=\"eael-grid-post-holder\">\n            <div class=\"eael-grid-post-holder-inner\"><div class=\"eael-entry-wrapper\"><header class=\"eael-entry-header\"><h2 class=\"eael-entry-title\"><a class=\"eael-grid-post-link\" href=\"https:\/\/acgcyberacademy.fr\/en\/cissp-ce-que-lexamen-evalue-vraiment\/\" title=\"CISSP\u00a0: ce que l&rsquo;examen \u00e9value vraiment\">CISSP\u00a0: ce que l&rsquo;examen \u00e9value vraiment<\/a><\/h2><\/header><div class=\"eael-entry-content\">\n                        <div class=\"eael-grid-post-excerpt\"><a href=\"https:\/\/acgcyberacademy.fr\/en\/cissp-ce-que-lexamen-evalue-vraiment\/\" class=\"eael-post-elements-readmore-btn\">Lire l\u2019article<\/a><\/div>\n                    <\/div><\/div><\/div>\n        <\/div>\n    <\/article><\/div>\n            <div class=\"clearfix\"><\/div>\n        <\/div>            <div class=\"eael-load-more-button-wrap eael-force-hide\">\n                <button class=\"eael-load-more-button\" id=\"eael-load-more-btn-18fc9b2\" data-widget-id=\"18fc9b2\" data-widget=\"18fc9b2\" data-page-id=\"31902\" data-template=\"{&quot;dir&quot;:&quot;lite&quot;,&quot;file_name&quot;:&quot;one.php&quot;,&quot;name&quot;:&quot;Post-Grid&quot;}\" data-class=\"Essential_Addons_Elementor\\Elements\\Post_Grid\" data-layout=\"masonry\" data-page=\"1\" data-args=\"orderby=date&amp;order=desc&amp;ignore_sticky_posts=1&amp;post_status=publish&amp;posts_per_page=3&amp;offset=0&amp;post_type=post&amp;tax_query%5B0%5D%5Btaxonomy%5D=category&amp;tax_query%5B0%5D%5Bfield%5D=term_id&amp;tax_query%5B0%5D%5Bterms%5D%5B0%5D=355&amp;tax_query%5Brelation%5D=AND&amp;post__not_in%5B0%5D=31902&amp;eael_args_sig=e46d0426b8966c922bbab86af211a9fa03c4f5353a360115015ff067d9212905\" data-max-page=\"3\">\n                    <span class=\"eael-btn-loader button__loader\"><\/span>\n                    <span class=\"eael_load_more_text\">Load More<\/span>\n                <\/button>\n            <\/div>\n            \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-81d043a e-con-full e-flex e-con e-child\" data-id=\"81d043a\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d5249be elementor-widget elementor-widget-heading\" data-id=\"d5249be\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Formations recommand\u00e9es<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-bb12d43 e-con-full e-grid e-con e-child\" data-id=\"bb12d43\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<a class=\"eael-wrapper-link-dda76b3 --eael-wrapper-link-tag\" href=\"https:\/\/acgcyberacademy.fr\/events\/pecb-certified-iso-iec-42001-lead-auditor\/\" target=\"_blank\"><\/a><div data-eael-wrapper-link=\"eael-wrapper-link-dda76b3\" class=\"elementor-element elementor-element-dda76b3 e-con-full e-flex e-con e-child\" data-id=\"dda76b3\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4559a9c elementor-widget elementor-widget-text-editor\" data-id=\"4559a9c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>ISO\/IEC 42001<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4913442 elementor-widget elementor-widget-text-editor\" data-id=\"4913442\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Lead Auditor<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<a class=\"eael-wrapper-link-24e20c3 --eael-wrapper-link-tag\" href=\"https:\/\/acgcyberacademy.fr\/events\/isc2-certified-information-systems-security-professional-cissp\/\" target=\"_blank\"><\/a><div data-eael-wrapper-link=\"eael-wrapper-link-24e20c3\" class=\"elementor-element elementor-element-24e20c3 e-con-full e-flex e-con e-child\" data-id=\"24e20c3\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-775218e elementor-widget elementor-widget-text-editor\" data-id=\"775218e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>CISSP<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-364a949 elementor-widget elementor-widget-text-editor\" data-id=\"364a949\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Certification ISC2\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<a class=\"eael-wrapper-link-607aa47 --eael-wrapper-link-tag\" href=\"https:\/\/acgcyberacademy.fr\/events\/pecb-certified-iso-cei-270012022-lead-implementer\/\" target=\"_blank\"><\/a><div data-eael-wrapper-link=\"eael-wrapper-link-607aa47\" class=\"elementor-element elementor-element-607aa47 e-con-full e-flex e-con e-child\" data-id=\"607aa47\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5c72898 elementor-widget elementor-widget-text-editor\" data-id=\"5c72898\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>ISO\/IEC 27001<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3b95ccb elementor-widget elementor-widget-text-editor\" data-id=\"3b95ccb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Lead Implementer<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<a class=\"eael-wrapper-link-9d9005f --eael-wrapper-link-tag\" href=\"https:\/\/acgcyberacademy.fr\/events\/pecb-certified-iso-iec-42001-lead-implementer\/\" target=\"_blank\"><\/a><div data-eael-wrapper-link=\"eael-wrapper-link-9d9005f\" class=\"elementor-element elementor-element-9d9005f e-con-full e-flex e-con e-child\" data-id=\"9d9005f\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c551c4d elementor-widget elementor-widget-text-editor\" data-id=\"c551c4d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>ISO\/IEC 42001\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-252de80 elementor-widget elementor-widget-text-editor\" data-id=\"252de80\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Lead Implementer<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b482b03 e-con-full e-flex e-con e-child\" data-id=\"b482b03\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a15a9cf elementor-widget elementor-widget-heading\" data-id=\"a15a9cf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Notre Catalogue<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1334f69 e-con-full e-flex e-con e-child\" data-id=\"1334f69\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e9775da elementor-widget__width-initial elementor-hidden-mobile elementor-widget elementor-widget-image\" data-id=\"e9775da\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/acgcyberacademy.fr\/catalogue-formations-cybersecurite-2026\/\" target=\"_blank\">\n\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"900\" height=\"1080\" src=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/06\/ProductService-Landing-Page-Website-in-Black-Blue-Techflux-Style.png\" class=\"attachment-full size-full wp-image-27146\" alt=\"catalogue-formations-cybersecurite-france-acg-cyberacademy.jpg\" srcset=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/06\/ProductService-Landing-Page-Website-in-Black-Blue-Techflux-Style.png 900w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/06\/ProductService-Landing-Page-Website-in-Black-Blue-Techflux-Style-250x300.png 250w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/06\/ProductService-Landing-Page-Website-in-Black-Blue-Techflux-Style-853x1024.png 853w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/06\/ProductService-Landing-Page-Website-in-Black-Blue-Techflux-Style-768x922.png 768w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/06\/ProductService-Landing-Page-Website-in-Black-Blue-Techflux-Style-10x12.png 10w\" sizes=\"(max-width: 900px) 100vw, 900px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-23c8702 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"23c8702\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Toutes nos formations en cybers\u00e9curit\u00e9, certifications et parcours, r\u00e9unies dans un seul document.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8e857cc elementor-align-center elementor-widget elementor-widget-button\" data-id=\"8e857cc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/acgcyberacademy.fr\/catalogue-formations-cybersecurite-2026\/\" target=\"_blank\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">T\u00e9l\u00e9charger le catalogue<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-6f7dcb3 e-con-full e-flex e-con e-child\" data-id=\"6f7dcb3\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c0c1f7b elementor-widget elementor-widget-spacer\" data-id=\"c0c1f7b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bb3546d elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"bb3546d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"chapeau\"><span class=\"TextRun SCXW188621369 BCX4\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW188621369 BCX4\">Rabah Hachichi \u2022 Directeur technique d\u2019ACG Cybersecurity<\/span><\/span><span class=\"EOP Selected SCXW188621369 BCX4\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span> \u00b7 30 octobre 2026 \u00b7 <em>Lecture 5 min<\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4bbd7c3 elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"4bbd7c3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"420\" src=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-entete-v2-1024x538.jpg\" class=\"attachment-large size-large wp-image-31982\" alt=\"\" srcset=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-entete-v2-1024x538.jpg 1024w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-entete-v2-300x158.jpg 300w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-entete-v2-768x403.jpg 768w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-entete-v2-18x9.jpg 18w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-entete-v2.jpg 1200w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0b5e74e elementor-widget elementor-widget-heading\" data-id=\"0b5e74e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Fuites de donn\u00e9es et s\u00e9curit\u00e9 des acc\u00e8s applicatifs <\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1309570 e-con-full e-flex e-con e-child\" data-id=\"1309570\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3d33f3b elementor-widget elementor-widget-text-editor\" data-id=\"3d33f3b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">Un compte compromis, des droits excessifs ou un stockage expos\u00e9 peuvent provoquer une fuite sans exploitation de faille logicielle. Le retour d\u2019exp\u00e9rience publi\u00e9 par le CERT-FR le 20 octobre 2026 rappelle l\u2019importance de prot\u00e9ger les donn\u00e9es tout au long de leur utilisation.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">L\u2019authentification doit \u00eatre compl\u00e9t\u00e9e par des autorisations adapt\u00e9es, une protection des sessions et une surveillance des consultations et des exports. Ces am\u00e9liorations peuvent commencer sans attendre le remplacement de l\u2019application.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b2a1eaa elementor-widget elementor-widget-text-editor\" data-id=\"b2a1eaa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><span class=\"TextRun SCXW223830508 BCX4\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW223830508 BCX4\" data-ccp-parastyle=\"heading 1\">Ce <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW223830508 BCX4\" data-ccp-parastyle=\"heading 1\">que<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW223830508 BCX4\" data-ccp-parastyle=\"heading 1\">montrent<\/span><span class=\"NormalTextRun SCXW223830508 BCX4\" data-ccp-parastyle=\"heading 1\"> les chiffres<\/span><\/span><span class=\"EOP Selected SCXW223830508 BCX4\" data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3a1ee53 elementor-widget elementor-widget-text-editor\" data-id=\"3a1ee53\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">En 2025, le CERT-FR a \u00e9t\u00e9 inform\u00e9 de 196 incidents d\u2019exfiltration de donn\u00e9es, contre 130 incidents de ce type trait\u00e9s en 2024. Ces chiffres refl\u00e8tent son activit\u00e9, sans constituer un recensement exhaustif des fuites en France.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Le rapport rassemble dix principes de s\u00e9curisation. Dans la plupart des cas \u00e9voqu\u00e9s dans sa synth\u00e8se, les intrusions n\u2019exploitent aucune vuln\u00e9rabilit\u00e9 technique. Cela ne signifie ni absence d\u2019attaque, ni disparition du risque li\u00e9 aux failles logicielles.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Directions et \u00e9quipes techniques doivent examiner ce que permettent les acc\u00e8s existants, au-del\u00e0 de la r\u00e9sistance de l\u2019application aux attaques classiques.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d7cc25b elementor-widget elementor-widget-text-editor\" data-id=\"d7cc25b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><span class=\"TextRun SCXW150603446 BCX4\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SpellingErrorV2Themed SCXW150603446 BCX4\" data-ccp-parastyle=\"heading 1\">Quelles<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW150603446 BCX4\" data-ccp-parastyle=\"heading 1\">organisations<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW150603446 BCX4\" data-ccp-parastyle=\"heading 1\">sont<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW150603446 BCX4\" data-ccp-parastyle=\"heading 1\">concern\u00e9es<\/span><\/span><span class=\"EOP Selected SCXW150603446 BCX4\" data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d8ea69e elementor-widget elementor-widget-text-editor\" data-id=\"d8ea69e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">Espace client, portail adh\u00e9rent, extranet, application m\u00e9tier ou service mobile utilisant une API : toute organisation donnant acc\u00e8s \u00e0 des donn\u00e9es doit en ma\u00eetriser les usages.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Cette responsabilit\u00e9 couvre les applications historiques et les prestations externalis\u00e9es. M\u00eame des coordonn\u00e9es ou des factures peuvent alimenter des fraudes cibl\u00e9es. Le p\u00e9rim\u00e8tre \u00e0 prot\u00e9ger doit \u00eatre d\u00e9fini avec les m\u00e9tiers et, pour les donn\u00e9es personnelles, le DPO.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eb0c467 elementor-widget elementor-widget-text-editor\" data-id=\"eb0c467\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><span class=\"TextRun SCXW167809506 BCX4\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW167809506 BCX4\" data-ccp-parastyle=\"heading 1\">Comment <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW167809506 BCX4\" data-ccp-parastyle=\"heading 1\">une<\/span><span class=\"NormalTextRun SCXW167809506 BCX4\" data-ccp-parastyle=\"heading 1\"> exfiltration <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW167809506 BCX4\" data-ccp-parastyle=\"heading 1\">devient<\/span><span class=\"NormalTextRun SCXW167809506 BCX4\" data-ccp-parastyle=\"heading 1\"> possible<\/span><\/span><span class=\"EOP Selected SCXW167809506 BCX4\" data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f5616f2 elementor-widget elementor-widget-text-editor\" data-id=\"f5616f2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">L\u2019usurpation d\u2019un compte peut r\u00e9sulter d\u2019un logiciel voleur d\u2019informations, de la r\u00e9utilisation de secrets divulgu\u00e9s ou d\u2019un hame\u00e7onnage. Une proc\u00e9dure de r\u00e9initialisation mal s\u00e9curis\u00e9e peut aussi \u00eatre d\u00e9tourn\u00e9e.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Un stockage, une sauvegarde ou un service mal configur\u00e9 peut exposer directement les donn\u00e9es. L\u2019usage malveillant d\u2019un acc\u00e8s interne et l\u2019exploitation de vuln\u00e9rabilit\u00e9s applicatives doivent \u00e9galement \u00eatre consid\u00e9r\u00e9s.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Apr\u00e8s l\u2019acc\u00e8s initial, les droits et les fonctions disponibles d\u00e9terminent l\u2019ampleur de l\u2019extraction : API permettant de parcourir trop de dossiers, exports excessifs ou privil\u00e8ges trop \u00e9tendus d\u2019un prestataire.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Des requ\u00eates techniquement valides peuvent r\u00e9v\u00e9ler un usage malveillant par les donn\u00e9es consult\u00e9es, leur fr\u00e9quence, les horaires ou leur origine. Une supervision adapt\u00e9e peut d\u00e9tecter ces anomalies.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e1835d3 elementor-widget elementor-widget-text-editor\" data-id=\"e1835d3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><span class=\"TextRun SCXW46023171 BCX4\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW46023171 BCX4\" data-ccp-parastyle=\"heading 1\">Les principes \u00e0 <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW46023171 BCX4\" data-ccp-parastyle=\"heading 1\">traduire<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW46023171 BCX4\" data-ccp-parastyle=\"heading 1\">en<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW46023171 BCX4\" data-ccp-parastyle=\"heading 1\">mesures<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW46023171 BCX4\" data-ccp-parastyle=\"heading 1\">concr\u00e8tes<\/span><\/span><span class=\"EOP Selected SCXW46023171 BCX4\" data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9d16397 elementor-widget elementor-widget-text-editor\" data-id=\"9d16397\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p aria-level=\"2\"><b><span data-contrast=\"none\">Ma\u00eetriser les donn\u00e9es et les acc\u00e8s<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Les premiers leviers concernent la gestion des donn\u00e9es, les droits, l\u2019exposition de l\u2019application, l\u2019authentification et la s\u00e9curisation de l\u2019h\u00e9bergement.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Il faut conna\u00eetre les donn\u00e9es, leurs flux et les utilisateurs autoris\u00e9s. Les droits doivent correspondre aux missions et \u00eatre revus lors des mobilit\u00e9s, d\u00e9parts et fins de prestation, y compris pour les comptes techniques et de service. Les comptes inactifs doivent \u00eatre d\u00e9sactiv\u00e9s et les acc\u00e8s exceptionnels limit\u00e9s dans le temps.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">La minimisation des donn\u00e9es limite l\u2019impact d\u2019une compromission. Conservation, extractions et usages hors production doivent \u00eatre ma\u00eetris\u00e9s, y compris chez les tiers.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">L\u2019authentification multifacteur r\u00e9duit fortement le risque li\u00e9 au vol d\u2019un mot de passe, selon le m\u00e9canisme et les proc\u00e9dures retenus. Les passkeys r\u00e9sistantes \u00e0 l\u2019hame\u00e7onnage sont \u00e0 privil\u00e9gier lorsque possible. Prot\u00e9ger postes et sessions reste n\u00e9cessaire : un cookie vol\u00e9 peut donner acc\u00e8s \u00e0 une session ouverte.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p aria-level=\"2\"><b><span data-contrast=\"none\">Comprendre et d\u00e9tecter les usages anormaux<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">La tra\u00e7abilit\u00e9 et la supervision doivent couvrir les consultations et les exports, au-del\u00e0 des seules connexions.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Les traces doivent relier les actions \u00e0 un compte, une origine et un contexte m\u00e9tier. Leur int\u00e9grit\u00e9, leur disponibilit\u00e9 et leur conservation conditionnent leur utilit\u00e9 en investigation. Il faut \u00e9viter d\u2019y recopier inutilement des donn\u00e9es personnelles ou des secrets. La collecte doit rester proportionn\u00e9e aux besoins de s\u00e9curit\u00e9.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Les seuils doivent tenir compte des usages m\u00e9tier : une extraction volumineuse peut \u00eatre autoris\u00e9e, une consultation isol\u00e9e pr\u00e9judiciable. D\u2019autres signaux sont n\u00e9cessaires pour d\u00e9tecter les extractions lentes ou r\u00e9parties entre plusieurs comptes.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span>\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1782740 elementor-widget elementor-widget-image\" data-id=\"1782740\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"450\" src=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-supervision-1024x576.jpg\" class=\"attachment-large size-large wp-image-31908\" alt=\"Pupitre de contr\u00f4le avec cadrans et voyants, illustrant la supervision des acc\u00e8s pour d\u00e9tecter une violation de donn\u00e9es applicative\" srcset=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-supervision-1024x576.jpg 1024w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-supervision-300x169.jpg 300w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-supervision-768x432.jpg 768w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-supervision-18x10.jpg 18w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-supervision.jpg 1200w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-770fadb elementor-widget elementor-widget-text-editor\" data-id=\"770fadb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"chapeau\">Superviser ne consiste pas \u00e0 tout regarder. Il s&rsquo;agit de conna\u00eetre la valeur normale, puis de savoir quand on s&rsquo;en \u00e9loigne.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-dca61fa elementor-widget elementor-widget-text-editor\" data-id=\"dca61fa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p aria-level=\"2\"><b><span data-contrast=\"none\">Pr\u00e9parer une r\u00e9action proportionn\u00e9e<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Ralentissement, suspension temporaire, authentification suppl\u00e9mentaire ou alerte peuvent \u00eatre automatis\u00e9s. Ces r\u00e9actions doivent \u00eatre d\u00e9finies avec les m\u00e9tiers et test\u00e9es pour \u00e9viter des interruptions injustifi\u00e9es.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Leur efficacit\u00e9 d\u00e9pend de la rapidit\u00e9 de d\u00e9tection et d\u2019intervention. Aucun seuil ne garantit l\u2019arr\u00eat d\u2019une exfiltration. Chaque alerte doit avoir un destinataire et une proc\u00e9dure de traitement. La proc\u00e9dure doit pr\u00e9ciser qui analyse, qui d\u00e9cide et qui intervient.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p aria-level=\"2\"><b><span data-contrast=\"none\">V\u00e9rifier la s\u00e9curit\u00e9 et faire accepter les risques<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Revues de configuration, tests de contr\u00f4le d\u2019acc\u00e8s, audits et tests d\u2019intrusion permettent de v\u00e9rifier la s\u00e9curit\u00e9 de l\u2019application. Leur profondeur et leur fr\u00e9quence doivent correspondre \u00e0 sa criticit\u00e9.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">L\u2019homologation dans le cadre du RGS et de la PSSIE concerne sp\u00e9cifiquement les administrations. En entreprise, une validation formalis\u00e9e et une acceptation des risques peuvent structurer les d\u00e9cisions selon le contexte et les obligations.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Le caract\u00e8re non normatif du rapport ne supprime pas les obligations de s\u00e9curit\u00e9 applicables.\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-819ab48 elementor-widget elementor-widget-text-editor\" data-id=\"819ab48\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4>Par o\u00f9 commencer<\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-591b7f4 elementor-widget elementor-widget-text-editor\" data-id=\"591b7f4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">M\u00e9tiers, DSI, RSSI et DPO peuvent commencer par trois questions : quelles applications donnent acc\u00e8s aux donn\u00e9es \u00e0 prot\u00e9ger et qui en r\u00e9pond ? Les droits respectent-ils le p\u00e9rim\u00e8tre m\u00e9tier ? Peut-on reconstituer consultations et exports ?<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Un inventaire cibl\u00e9, une revue des habilitations et des journaux, puis des tests sur un p\u00e9rim\u00e8tre autoris\u00e9 permettent de v\u00e9rifier les r\u00e9ponses et de prioriser les actions.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Certaines corrections rel\u00e8vent de la configuration ; d\u2019autres n\u00e9cessitent un d\u00e9veloppement, une \u00e9volution d\u2019architecture ou l\u2019intervention d\u2019un fournisseur. Le plan d\u2019action doit pr\u00e9ciser responsables, moyens, \u00e9ch\u00e9ances et crit\u00e8res de v\u00e9rification, avec des mesures de r\u00e9duction du risque pendant les travaux. Les \u00e9carts r\u00e9siduels doivent \u00eatre document\u00e9s et suivis jusqu\u2019\u00e0 leur r\u00e9solution.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7053c83 elementor-widget elementor-widget-image\" data-id=\"7053c83\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"450\" src=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-reunion-1024x576.jpg\" class=\"attachment-large size-large wp-image-31911\" alt=\"\u00c9quipe r\u00e9unie autour d&apos;une table pour poser les trois questions sur les violations de donn\u00e9es applicatives\" srcset=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-reunion-1024x576.jpg 1024w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-reunion-300x169.jpg 300w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-reunion-768x432.jpg 768w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-reunion-18x10.jpg 18w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-reunion.jpg 1200w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5b51c8b elementor-widget elementor-widget-text-editor\" data-id=\"5b51c8b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"chapeau\">Le point de d\u00e9part n&rsquo;est pas un audit. Ce sont trois questions, pos\u00e9es \u00e0 voix haute, devant les personnes qui ont les r\u00e9ponses.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-48a448e elementor-widget elementor-widget-text-editor\" data-id=\"48a448e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><span class=\"TextRun SCXW41806099 BCX4\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SpellingErrorV2Themed SCXW41806099 BCX4\" data-ccp-parastyle=\"heading 1\">Pr\u00e9parer<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW41806099 BCX4\" data-ccp-parastyle=\"heading 1\">aussi<\/span><span class=\"NormalTextRun SCXW41806099 BCX4\" data-ccp-parastyle=\"heading 1\"> la gestion de la violation<\/span><\/span><span class=\"EOP Selected SCXW41806099 BCX4\" data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-93a89f7 elementor-widget elementor-widget-text-editor\" data-id=\"93a89f7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">Les \u00e9quipes doivent pouvoir pr\u00e9server les traces, r\u00e9voquer les acc\u00e8s compromis, contenir l\u2019extraction et qualifier les donn\u00e9es concern\u00e9es. D\u00e9cisions et coordination avec les prestataires doivent \u00eatre pr\u00e9par\u00e9es.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Le DPO contribue \u00e0 l\u2019\u00e9valuation des cons\u00e9quences. Une violation pr\u00e9sentant un risque pour les droits et libert\u00e9s doit \u00eatre notifi\u00e9e \u00e0 l\u2019autorit\u00e9 comp\u00e9tente dans les meilleurs d\u00e9lais et, si possible, sous 72 heures apr\u00e8s prise de connaissance. En cas de risque \u00e9lev\u00e9, les personnes doivent \u00e9galement \u00eatre inform\u00e9es, sous r\u00e9serve des exceptions du RGPD.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c1748b6 e-con-full e-flex e-con e-child\" data-id=\"c1748b6\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-188c4c8 elementor-widget elementor-widget-text-editor\" data-id=\"188c4c8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><span class=\"TextRun SCXW221899020 BCX4\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SpellingErrorV2Themed SCXW221899020 BCX4\" data-ccp-parastyle=\"heading 1\">D\u00e9velopper<\/span><span class=\"NormalTextRun SCXW221899020 BCX4\" data-ccp-parastyle=\"heading 1\"> les <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW221899020 BCX4\" data-ccp-parastyle=\"heading 1\">comp\u00e9tences<\/span><span class=\"NormalTextRun SCXW221899020 BCX4\" data-ccp-parastyle=\"heading 1\"> avec ACG <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW221899020 BCX4\" data-ccp-parastyle=\"heading 1\">CyberAcademy<\/span><\/span><span class=\"EOP Selected SCXW221899020 BCX4\" data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8e44471 elementor-widget elementor-widget-text-editor\" data-id=\"8e44471\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">La formation doit apprendre \u00e0 v\u00e9rifier les contr\u00f4les, interpr\u00e9ter les anomalies et r\u00e9agir, \u00e0 partir de situations concr\u00e8tes : compte compromis, droits excessifs, export inhabituel ou stockage expos\u00e9.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Un parcours associant identit\u00e9s et acc\u00e8s, s\u00e9curit\u00e9 applicative, supervision et r\u00e9ponse \u00e0 incident peut s\u2019appuyer sur une application repr\u00e9sentative pour relier responsabilit\u00e9s m\u00e9tier, mesures techniques et preuves attendues.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Pour \u00e9tudier une formation ou un atelier adapt\u00e9 \u00e0 votre organisation :\u00a0<\/span><\/p><p><a href=\"mailto:formation@acgcybersecurity.fr\">formation@acgcybersecurity.fr<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b7cd433 elementor-widget elementor-widget-text-editor\" data-id=\"b7cd433\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h5>Questions fr\u00e9quentes<\/h5>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8d83076 elementor-widget elementor-widget-n-accordion\" data-id=\"8d83076\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;default_state&quot;:&quot;expanded&quot;,&quot;max_items_expended&quot;:&quot;one&quot;,&quot;n_accordion_animation_duration&quot;:{&quot;unit&quot;:&quot;ms&quot;,&quot;size&quot;:400,&quot;sizes&quot;:[]}}\" data-widget_type=\"nested-accordion.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"e-n-accordion\" aria-label=\"Accordion. Open links with Enter or Space, close with Escape, and navigate with Arrow Keys\">\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-1480\" class=\"e-n-accordion-item\" open>\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"1\" tabindex=\"0\" aria-expanded=\"true\" aria-controls=\"e-n-accordion-item-1480\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Une attaque n\u00e9cessite-t-elle une faille logicielle  <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-1480\" class=\"elementor-element elementor-element-bb175da e-con-full e-flex e-con e-child\" data-id=\"bb175da\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-84dcd37 elementor-widget elementor-widget-text-editor\" data-id=\"84dcd37\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW26310487 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW26310487 BCX8\">Non<\/span><span class=\"NormalTextRun SCXW26310487 BCX8\">. <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">L\u2019usage<\/span><span class=\"NormalTextRun SCXW26310487 BCX8\"> d\u2019un compte <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">compromis<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">ou<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">l\u2019acc\u00e8s<\/span><span class=\"NormalTextRun SCXW26310487 BCX8\"> \u00e0 des donn\u00e9es <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">expos\u00e9es<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">peuvent<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">suffire<\/span><span class=\"NormalTextRun SCXW26310487 BCX8\">. La gestion des <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">vuln\u00e9rabilit\u00e9s<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">demeure<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">n\u00e9anmoins<\/span><span class=\"NormalTextRun SCXW26310487 BCX8\"> indispensable.<\/span><\/span><span class=\"EOP Selected SCXW26310487 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-1481\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"2\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-1481\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Le MFA suffit-il \u00e0 prot\u00e9ger les donn\u00e9es  <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-1481\" class=\"elementor-element elementor-element-fe79ad3 e-con-full e-flex e-con e-child\" data-id=\"fe79ad3\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b705614 elementor-widget elementor-widget-text-editor\" data-id=\"b705614\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW82476655 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW82476655 BCX8\">Non<\/span><span class=\"NormalTextRun SCXW82476655 BCX8\">. Il <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW82476655 BCX8\">renforce<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW82476655 BCX8\">l\u2019authentification<\/span><span class=\"NormalTextRun SCXW82476655 BCX8\">, <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW82476655 BCX8\">mais<\/span><span class=\"NormalTextRun SCXW82476655 BCX8\"> ne <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW82476655 BCX8\">remplace<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW82476655 BCX8\">ni<\/span><span class=\"NormalTextRun SCXW82476655 BCX8\"> les <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW82476655 BCX8\">autorisations<\/span><span class=\"NormalTextRun SCXW82476655 BCX8\">, <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW82476655 BCX8\">ni<\/span><span class=\"NormalTextRun SCXW82476655 BCX8\"> la protection des sessions, <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW82476655 BCX8\">ni<\/span><span class=\"NormalTextRun SCXW82476655 BCX8\"> la surveillance des usages.<\/span><\/span><span class=\"EOP Selected SCXW82476655 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-1482\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"3\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-1482\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Faut-il remplacer toutes les applications concern\u00e9es  <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-1482\" class=\"elementor-element elementor-element-1ede283 e-con-full e-flex e-con e-child\" data-id=\"1ede283\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fed1666 elementor-widget elementor-widget-text-editor\" data-id=\"fed1666\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"acg-faq\"><p><span class=\"TextRun SCXW121171565 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW121171565 BCX8\">Non<\/span><span class=\"NormalTextRun SCXW121171565 BCX8\">. Des <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">mesures<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">peuvent<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">\u00eatre<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">appliqu\u00e9es<\/span><span class=\"NormalTextRun SCXW121171565 BCX8\"> sur <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">l\u2019existant<\/span><span class=\"NormalTextRun SCXW121171565 BCX8\">. Les <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">limites<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">r\u00e9siduelles<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">doivent<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">\u00eatre<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">\u00e9valu\u00e9es<\/span><span class=\"NormalTextRun SCXW121171565 BCX8\"> pour <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">d\u00e9cider<\/span><span class=\"NormalTextRun SCXW121171565 BCX8\"> des <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">\u00e9volutions<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">n\u00e9cessaires<\/span><span class=\"NormalTextRun SCXW121171565 BCX8\">.<\/span><\/span><span class=\"EOP Selected SCXW121171565 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-1483\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"4\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-1483\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Les recommandations sont-elles directement applicables  <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-1483\" class=\"elementor-element elementor-element-ed22f9c e-flex e-con-boxed e-con e-child\" data-id=\"ed22f9c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-36e763f elementor-widget elementor-widget-text-editor\" data-id=\"36e763f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"acg-faq\"><p><span class=\"TextRun SCXW52124774 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW52124774 BCX8\">Elles constituent des <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">pistes<\/span><span class=\"NormalTextRun SCXW52124774 BCX8\"> \u00e0 adapter \u00e0 <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">l\u2019architecture<\/span><span class=\"NormalTextRun SCXW52124774 BCX8\">, aux usages et aux <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">risques<\/span><span class=\"NormalTextRun SCXW52124774 BCX8\">. Leur <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">d\u00e9ploiement<\/span><span class=\"NormalTextRun SCXW52124774 BCX8\"> doit <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">\u00eatre<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">valid\u00e9<\/span><span class=\"NormalTextRun SCXW52124774 BCX8\"> et <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">leur<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">efficacit\u00e9<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">v\u00e9rifi\u00e9e<\/span><span class=\"NormalTextRun SCXW52124774 BCX8\">.<\/span><\/span><span class=\"EOP Selected SCXW52124774 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-3c5a888 e-con-full e-flex e-con e-child\" data-id=\"3c5a888\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d4424e5 elementor-widget__width-initial elementor-author-box--image-valign-middle elementor-widget elementor-widget-author-box\" data-id=\"d4424e5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"author-box.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-author-box\">\n\t\t\t\t\t\t\t<div  class=\"elementor-author-box__avatar\">\n\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/09\/image_2026-09-03_235912370.png\" alt=\"Picture of Rabah Hachichi\" loading=\"lazy\">\n\t\t\t\t<\/div>\n\t\t\t\n\t\t\t<div class=\"elementor-author-box__text\">\n\t\t\t\t\t\t\t\t\t<div >\n\t\t\t\t\t\t<h4 class=\"elementor-author-box__name\">\n\t\t\t\t\t\t\tRabah Hachichi\t\t\t\t\t\t<\/h4>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-author-box__bio\">\n\t\t\t\t\t\t<p>Directeur Technique, ACG Cybersecurity. CISSP, CISM, ISO 27001 Lead Auditor. Vingt-cinq ans en cybers\u00e9curit\u00e9, dont quinze comme RSSI. Auditeur et formateur en continuit\u00e9 d'activit\u00e9 et gestion de crise.<\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4cc3063 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"4cc3063\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"chapeau\">Publi\u00e9 le 30 octobre 2026. Mis \u00e0 jour le 30 octobre 2026. Sources v\u00e9rifi\u00e9es le 30 octobre 2026.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-bf61753 e-con-full elementor-hidden-desktop elementor-hidden-tablet e-flex e-con e-child\" data-id=\"bf61753\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-078d11c elementor-widget elementor-widget-spacer\" data-id=\"078d11c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9b9564c elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"9b9564c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"chapeau\"><span class=\"TextRun SCXW188621369 BCX4\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW188621369 BCX4\">Rabah Hachichi \u2022 Directeur technique d\u2019ACG Cybersecurity<\/span><\/span><span class=\"EOP Selected SCXW188621369 BCX4\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span> \u00b7 30 octobre 2026 \u00b7 <em>Lecture 5 min<\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-783bf9b elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"783bf9b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"420\" src=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-entete-v2-1024x538.jpg\" class=\"attachment-large size-large wp-image-31982\" alt=\"\" srcset=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-entete-v2-1024x538.jpg 1024w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-entete-v2-300x158.jpg 300w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-entete-v2-768x403.jpg 768w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-entete-v2-18x9.jpg 18w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-entete-v2.jpg 1200w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-95f2d26 elementor-widget elementor-widget-heading\" data-id=\"95f2d26\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Fuites de donn\u00e9es et s\u00e9curit\u00e9 des acc\u00e8s applicatifs <\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1c7a6a8 e-con-full e-flex e-con e-child\" data-id=\"1c7a6a8\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1de6853 elementor-widget elementor-widget-text-editor\" data-id=\"1de6853\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">Un compte compromis, des droits excessifs ou un stockage expos\u00e9 peuvent provoquer une fuite sans exploitation de faille logicielle. Le retour d\u2019exp\u00e9rience publi\u00e9 par le CERT-FR le 20 octobre 2026 rappelle l\u2019importance de prot\u00e9ger les donn\u00e9es tout au long de leur utilisation.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">L\u2019authentification doit \u00eatre compl\u00e9t\u00e9e par des autorisations adapt\u00e9es, une protection des sessions et une surveillance des consultations et des exports. Ces am\u00e9liorations peuvent commencer sans attendre le remplacement de l\u2019application.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eb4f7da elementor-widget elementor-widget-text-editor\" data-id=\"eb4f7da\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><span class=\"TextRun SCXW231742192 BCX4\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW231742192 BCX4\" data-ccp-parastyle=\"heading 1\">Ce <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW231742192 BCX4\" data-ccp-parastyle=\"heading 1\">que<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW231742192 BCX4\" data-ccp-parastyle=\"heading 1\">montrent<\/span><span class=\"NormalTextRun SCXW231742192 BCX4\" data-ccp-parastyle=\"heading 1\"> les chiffres<\/span><\/span><span class=\"EOP Selected SCXW231742192 BCX4\" data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6c90651 elementor-widget elementor-widget-text-editor\" data-id=\"6c90651\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">En 2025, le CERT-FR a \u00e9t\u00e9 inform\u00e9 de 196 incidents d\u2019exfiltration de donn\u00e9es, contre 130 incidents de ce type trait\u00e9s en 2024. Ces chiffres refl\u00e8tent son activit\u00e9, sans constituer un recensement exhaustif des fuites en France.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Le rapport rassemble dix principes de s\u00e9curisation. Dans la plupart des cas \u00e9voqu\u00e9s dans sa synth\u00e8se, les intrusions n\u2019exploitent aucune vuln\u00e9rabilit\u00e9 technique. Cela ne signifie ni absence d\u2019attaque, ni disparition du risque li\u00e9 aux failles logicielles.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Directions et \u00e9quipes techniques doivent examiner ce que permettent les acc\u00e8s existants, au-del\u00e0 de la r\u00e9sistance de l\u2019application aux attaques classiques.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-48e0d10 elementor-widget elementor-widget-text-editor\" data-id=\"48e0d10\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><span class=\"TextRun SCXW83187625 BCX4\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SpellingErrorV2Themed SCXW83187625 BCX4\" data-ccp-parastyle=\"heading 1\">Quelles<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW83187625 BCX4\" data-ccp-parastyle=\"heading 1\">organisations<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW83187625 BCX4\" data-ccp-parastyle=\"heading 1\">sont<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW83187625 BCX4\" data-ccp-parastyle=\"heading 1\">concern\u00e9es<\/span><\/span><span class=\"EOP Selected SCXW83187625 BCX4\" data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-560347c elementor-widget elementor-widget-text-editor\" data-id=\"560347c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">Espace client, portail adh\u00e9rent, extranet, application m\u00e9tier ou service mobile utilisant une API : toute organisation donnant acc\u00e8s \u00e0 des donn\u00e9es doit en ma\u00eetriser les usages.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Cette responsabilit\u00e9 couvre les applications historiques et les prestations externalis\u00e9es. M\u00eame des coordonn\u00e9es ou des factures peuvent alimenter des fraudes cibl\u00e9es. Le p\u00e9rim\u00e8tre \u00e0 prot\u00e9ger doit \u00eatre d\u00e9fini avec les m\u00e9tiers et, pour les donn\u00e9es personnelles, le DPO.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8804855 elementor-widget elementor-widget-text-editor\" data-id=\"8804855\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><span class=\"TextRun SCXW10174724 BCX4\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW10174724 BCX4\" data-ccp-parastyle=\"heading 1\">Comment <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW10174724 BCX4\" data-ccp-parastyle=\"heading 1\">une<\/span><span class=\"NormalTextRun SCXW10174724 BCX4\" data-ccp-parastyle=\"heading 1\"> exfiltration <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW10174724 BCX4\" data-ccp-parastyle=\"heading 1\">devient<\/span><span class=\"NormalTextRun SCXW10174724 BCX4\" data-ccp-parastyle=\"heading 1\"> possible<\/span><\/span><span class=\"EOP Selected SCXW10174724 BCX4\" data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0b0ddc5 elementor-widget elementor-widget-text-editor\" data-id=\"0b0ddc5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">L\u2019usurpation d\u2019un compte peut r\u00e9sulter d\u2019un logiciel voleur d\u2019informations, de la r\u00e9utilisation de secrets divulgu\u00e9s ou d\u2019un hame\u00e7onnage. Une proc\u00e9dure de r\u00e9initialisation mal s\u00e9curis\u00e9e peut aussi \u00eatre d\u00e9tourn\u00e9e.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Un stockage, une sauvegarde ou un service mal configur\u00e9 peut exposer directement les donn\u00e9es. L\u2019usage malveillant d\u2019un acc\u00e8s interne et l\u2019exploitation de vuln\u00e9rabilit\u00e9s applicatives doivent \u00e9galement \u00eatre consid\u00e9r\u00e9s.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Apr\u00e8s l\u2019acc\u00e8s initial, les droits et les fonctions disponibles d\u00e9terminent l\u2019ampleur de l\u2019extraction : API permettant de parcourir trop de dossiers, exports excessifs ou privil\u00e8ges trop \u00e9tendus d\u2019un prestataire.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Des requ\u00eates techniquement valides peuvent r\u00e9v\u00e9ler un usage malveillant par les donn\u00e9es consult\u00e9es, leur fr\u00e9quence, les horaires ou leur origine. Une supervision adapt\u00e9e peut d\u00e9tecter ces anomalies.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-33b3468 elementor-widget elementor-widget-text-editor\" data-id=\"33b3468\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><span class=\"TextRun SCXW55235733 BCX4\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW55235733 BCX4\" data-ccp-parastyle=\"heading 1\">Les principes \u00e0 <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW55235733 BCX4\" data-ccp-parastyle=\"heading 1\">traduire<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW55235733 BCX4\" data-ccp-parastyle=\"heading 1\">en<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW55235733 BCX4\" data-ccp-parastyle=\"heading 1\">mesures<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW55235733 BCX4\" data-ccp-parastyle=\"heading 1\">concr\u00e8tes<\/span><\/span><span class=\"EOP Selected SCXW55235733 BCX4\" data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5686a44 elementor-widget elementor-widget-text-editor\" data-id=\"5686a44\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p aria-level=\"2\"><b><span data-contrast=\"none\">Ma\u00eetriser les donn\u00e9es et les acc\u00e8s<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Les premiers leviers concernent la gestion des donn\u00e9es, les droits, l\u2019exposition de l\u2019application, l\u2019authentification et la s\u00e9curisation de l\u2019h\u00e9bergement.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Il faut conna\u00eetre les donn\u00e9es, leurs flux et les utilisateurs autoris\u00e9s. Les droits doivent correspondre aux missions et \u00eatre revus lors des mobilit\u00e9s, d\u00e9parts et fins de prestation, y compris pour les comptes techniques et de service. Les comptes inactifs doivent \u00eatre d\u00e9sactiv\u00e9s et les acc\u00e8s exceptionnels limit\u00e9s dans le temps.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">La minimisation des donn\u00e9es limite l\u2019impact d\u2019une compromission. Conservation, extractions et usages hors production doivent \u00eatre ma\u00eetris\u00e9s, y compris chez les tiers.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">L\u2019authentification multifacteur r\u00e9duit fortement le risque li\u00e9 au vol d\u2019un mot de passe, selon le m\u00e9canisme et les proc\u00e9dures retenus. Les passkeys r\u00e9sistantes \u00e0 l\u2019hame\u00e7onnage sont \u00e0 privil\u00e9gier lorsque possible. Prot\u00e9ger postes et sessions reste n\u00e9cessaire : un cookie vol\u00e9 peut donner acc\u00e8s \u00e0 une session ouverte.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p aria-level=\"2\"><b><span data-contrast=\"none\">Comprendre et d\u00e9tecter les usages anormaux<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">La tra\u00e7abilit\u00e9 et la supervision doivent couvrir les consultations et les exports, au-del\u00e0 des seules connexions.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Les traces doivent relier les actions \u00e0 un compte, une origine et un contexte m\u00e9tier. Leur int\u00e9grit\u00e9, leur disponibilit\u00e9 et leur conservation conditionnent leur utilit\u00e9 en investigation. Il faut \u00e9viter d\u2019y recopier inutilement des donn\u00e9es personnelles ou des secrets. La collecte doit rester proportionn\u00e9e aux besoins de s\u00e9curit\u00e9.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Les seuils doivent tenir compte des usages m\u00e9tier : une extraction volumineuse peut \u00eatre autoris\u00e9e, une consultation isol\u00e9e pr\u00e9judiciable. D\u2019autres signaux sont n\u00e9cessaires pour d\u00e9tecter les extractions lentes ou r\u00e9parties entre plusieurs comptes.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-671bf48 elementor-widget elementor-widget-image\" data-id=\"671bf48\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"450\" src=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-supervision-1024x576.jpg\" class=\"attachment-large size-large wp-image-31908\" alt=\"Pupitre de contr\u00f4le avec cadrans et voyants, illustrant la supervision des acc\u00e8s pour d\u00e9tecter une violation de donn\u00e9es applicative\" srcset=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-supervision-1024x576.jpg 1024w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-supervision-300x169.jpg 300w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-supervision-768x432.jpg 768w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-supervision-18x10.jpg 18w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-supervision.jpg 1200w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-34f66e1 elementor-widget elementor-widget-text-editor\" data-id=\"34f66e1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"chapeau\">Superviser ne consiste pas \u00e0 tout regarder. Il s&rsquo;agit de conna\u00eetre la valeur normale, puis de savoir quand on s&rsquo;en \u00e9loigne.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8eda2cc elementor-widget elementor-widget-text-editor\" data-id=\"8eda2cc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p aria-level=\"2\"><b><span data-contrast=\"none\">Pr\u00e9parer une r\u00e9action proportionn\u00e9e<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Ralentissement, suspension temporaire, authentification suppl\u00e9mentaire ou alerte peuvent \u00eatre automatis\u00e9s. Ces r\u00e9actions doivent \u00eatre d\u00e9finies avec les m\u00e9tiers et test\u00e9es pour \u00e9viter des interruptions injustifi\u00e9es.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Leur efficacit\u00e9 d\u00e9pend de la rapidit\u00e9 de d\u00e9tection et d\u2019intervention. Aucun seuil ne garantit l\u2019arr\u00eat d\u2019une exfiltration. Chaque alerte doit avoir un destinataire et une proc\u00e9dure de traitement. La proc\u00e9dure doit pr\u00e9ciser qui analyse, qui d\u00e9cide et qui intervient.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p aria-level=\"2\"><b><span data-contrast=\"none\">V\u00e9rifier la s\u00e9curit\u00e9 et faire accepter les risques<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Revues de configuration, tests de contr\u00f4le d\u2019acc\u00e8s, audits et tests d\u2019intrusion permettent de v\u00e9rifier la s\u00e9curit\u00e9 de l\u2019application. Leur profondeur et leur fr\u00e9quence doivent correspondre \u00e0 sa criticit\u00e9.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">L\u2019homologation dans le cadre du RGS et de la PSSIE concerne sp\u00e9cifiquement les administrations. En entreprise, une validation formalis\u00e9e et une acceptation des risques peuvent structurer les d\u00e9cisions selon le contexte et les obligations.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Le caract\u00e8re non normatif du rapport ne supprime pas les obligations de s\u00e9curit\u00e9 applicables.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-74988df elementor-widget elementor-widget-text-editor\" data-id=\"74988df\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4>Par o\u00f9 commencer<\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c3a83e6 elementor-widget elementor-widget-text-editor\" data-id=\"c3a83e6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">M\u00e9tiers, DSI, RSSI et DPO peuvent commencer par trois questions : quelles applications donnent acc\u00e8s aux donn\u00e9es \u00e0 prot\u00e9ger et qui en r\u00e9pond ? Les droits respectent-ils le p\u00e9rim\u00e8tre m\u00e9tier ? Peut-on reconstituer consultations et exports ?<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Un inventaire cibl\u00e9, une revue des habilitations et des journaux, puis des tests sur un p\u00e9rim\u00e8tre autoris\u00e9 permettent de v\u00e9rifier les r\u00e9ponses et de prioriser les actions.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Certaines corrections rel\u00e8vent de la configuration ; d\u2019autres n\u00e9cessitent un d\u00e9veloppement, une \u00e9volution d\u2019architecture ou l\u2019intervention d\u2019un fournisseur. Le plan d\u2019action doit pr\u00e9ciser responsables, moyens, \u00e9ch\u00e9ances et crit\u00e8res de v\u00e9rification, avec des mesures de r\u00e9duction du risque pendant les travaux. Les \u00e9carts r\u00e9siduels doivent \u00eatre document\u00e9s et suivis jusqu\u2019\u00e0 leur r\u00e9solution.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4f33ac4 elementor-widget elementor-widget-image\" data-id=\"4f33ac4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"450\" src=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-reunion-1024x576.jpg\" class=\"attachment-large size-large wp-image-31911\" alt=\"\u00c9quipe r\u00e9unie autour d&apos;une table pour poser les trois questions sur les violations de donn\u00e9es applicatives\" srcset=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-reunion-1024x576.jpg 1024w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-reunion-300x169.jpg 300w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-reunion-768x432.jpg 768w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-reunion-18x10.jpg 18w, https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/11\/certfr-reunion.jpg 1200w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d85fd97 elementor-widget elementor-widget-text-editor\" data-id=\"d85fd97\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"chapeau\">Le point de d\u00e9part n&rsquo;est pas un audit. Ce sont trois questions, pos\u00e9es \u00e0 voix haute, devant les personnes qui ont les r\u00e9ponses.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a399c72 elementor-widget elementor-widget-text-editor\" data-id=\"a399c72\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><span class=\"TextRun SCXW51528806 BCX4\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SpellingErrorV2Themed SCXW51528806 BCX4\" data-ccp-parastyle=\"heading 1\">Pr\u00e9parer<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW51528806 BCX4\" data-ccp-parastyle=\"heading 1\">aussi<\/span><span class=\"NormalTextRun SCXW51528806 BCX4\" data-ccp-parastyle=\"heading 1\"> la gestion de la violation<\/span><\/span><span class=\"EOP Selected SCXW51528806 BCX4\" data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f9c54b1 elementor-widget elementor-widget-text-editor\" data-id=\"f9c54b1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">Les \u00e9quipes doivent pouvoir pr\u00e9server les traces, r\u00e9voquer les acc\u00e8s compromis, contenir l\u2019extraction et qualifier les donn\u00e9es concern\u00e9es. D\u00e9cisions et coordination avec les prestataires doivent \u00eatre pr\u00e9par\u00e9es.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Le DPO contribue \u00e0 l\u2019\u00e9valuation des cons\u00e9quences. Une violation pr\u00e9sentant un risque pour les droits et libert\u00e9s doit \u00eatre notifi\u00e9e \u00e0 l\u2019autorit\u00e9 comp\u00e9tente dans les meilleurs d\u00e9lais et, si possible, sous 72 heures apr\u00e8s prise de connaissance. En cas de risque \u00e9lev\u00e9, les personnes doivent \u00e9galement \u00eatre inform\u00e9es, sous r\u00e9serve des exceptions du RGPD.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7490c47 e-con-full e-flex e-con e-child\" data-id=\"7490c47\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6ec2dca elementor-widget elementor-widget-text-editor\" data-id=\"6ec2dca\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><span class=\"TextRun SCXW234053195 BCX4\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SpellingErrorV2Themed SCXW234053195 BCX4\" data-ccp-parastyle=\"heading 1\">D\u00e9velopper<\/span><span class=\"NormalTextRun SCXW234053195 BCX4\" data-ccp-parastyle=\"heading 1\"> les <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW234053195 BCX4\" data-ccp-parastyle=\"heading 1\">comp\u00e9tences<\/span><span class=\"NormalTextRun SCXW234053195 BCX4\" data-ccp-parastyle=\"heading 1\"> avec ACG <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW234053195 BCX4\" data-ccp-parastyle=\"heading 1\">CyberAcademy<\/span><\/span><span class=\"EOP Selected SCXW234053195 BCX4\" data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b174b7f elementor-widget elementor-widget-text-editor\" data-id=\"b174b7f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">La formation doit apprendre \u00e0 v\u00e9rifier les contr\u00f4les, interpr\u00e9ter les anomalies et r\u00e9agir, \u00e0 partir de situations concr\u00e8tes : compte compromis, droits excessifs, export inhabituel ou stockage expos\u00e9.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Un parcours associant identit\u00e9s et acc\u00e8s, s\u00e9curit\u00e9 applicative, supervision et r\u00e9ponse \u00e0 incident peut s\u2019appuyer sur une application repr\u00e9sentative pour relier responsabilit\u00e9s m\u00e9tier, mesures techniques et preuves attendues.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Pour \u00e9tudier une formation ou un atelier adapt\u00e9 \u00e0 votre organisation :<\/span><\/p><p><a href=\"mailto:formation@acgcybersecurity.fr\">formation@acgcybersecurity.fr<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3425d31 elementor-widget elementor-widget-text-editor\" data-id=\"3425d31\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4>Questions fr\u00e9quentes<\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1070869 elementor-widget elementor-widget-n-accordion\" data-id=\"1070869\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;default_state&quot;:&quot;expanded&quot;,&quot;max_items_expended&quot;:&quot;one&quot;,&quot;n_accordion_animation_duration&quot;:{&quot;unit&quot;:&quot;ms&quot;,&quot;size&quot;:400,&quot;sizes&quot;:[]}}\" data-widget_type=\"nested-accordion.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"e-n-accordion\" aria-label=\"Accordion. Open links with Enter or Space, close with Escape, and navigate with Arrow Keys\">\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-1720\" class=\"e-n-accordion-item\" open>\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"1\" tabindex=\"0\" aria-expanded=\"true\" aria-controls=\"e-n-accordion-item-1720\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Une attaque n\u00e9cessite-t-elle une faille logicielle  <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-1720\" class=\"elementor-element elementor-element-99f0cb0 e-con-full e-flex e-con e-child\" data-id=\"99f0cb0\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4e2a17c elementor-widget elementor-widget-text-editor\" data-id=\"4e2a17c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW26310487 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW26310487 BCX8\">Non<\/span><span class=\"NormalTextRun SCXW26310487 BCX8\">. <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">L\u2019usage<\/span><span class=\"NormalTextRun SCXW26310487 BCX8\"> d\u2019un compte <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">compromis<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">ou<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">l\u2019acc\u00e8s<\/span><span class=\"NormalTextRun SCXW26310487 BCX8\"> \u00e0 des donn\u00e9es <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">expos\u00e9es<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">peuvent<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">suffire<\/span><span class=\"NormalTextRun SCXW26310487 BCX8\">. La gestion des <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">vuln\u00e9rabilit\u00e9s<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">demeure<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW26310487 BCX8\">n\u00e9anmoins<\/span><span class=\"NormalTextRun SCXW26310487 BCX8\"> indispensable.<\/span><\/span><span class=\"EOP Selected SCXW26310487 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-1721\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"2\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-1721\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Le MFA suffit-il \u00e0 prot\u00e9ger les donn\u00e9es  <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-1721\" class=\"elementor-element elementor-element-37a73d5 e-con-full e-flex e-con e-child\" data-id=\"37a73d5\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d4e288a elementor-widget elementor-widget-text-editor\" data-id=\"d4e288a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW82476655 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW82476655 BCX8\">Non<\/span><span class=\"NormalTextRun SCXW82476655 BCX8\">. Il <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW82476655 BCX8\">renforce<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW82476655 BCX8\">l\u2019authentification<\/span><span class=\"NormalTextRun SCXW82476655 BCX8\">, <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW82476655 BCX8\">mais<\/span><span class=\"NormalTextRun SCXW82476655 BCX8\"> ne <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW82476655 BCX8\">remplace<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW82476655 BCX8\">ni<\/span><span class=\"NormalTextRun SCXW82476655 BCX8\"> les <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW82476655 BCX8\">autorisations<\/span><span class=\"NormalTextRun SCXW82476655 BCX8\">, <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW82476655 BCX8\">ni<\/span><span class=\"NormalTextRun SCXW82476655 BCX8\"> la protection des sessions, <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW82476655 BCX8\">ni<\/span><span class=\"NormalTextRun SCXW82476655 BCX8\"> la surveillance des usages.<\/span><\/span><span class=\"EOP Selected SCXW82476655 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-1722\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"3\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-1722\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Faut-il remplacer toutes les applications concern\u00e9es  <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-1722\" class=\"elementor-element elementor-element-096dee2 e-con-full e-flex e-con e-child\" data-id=\"096dee2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-110df12 elementor-widget elementor-widget-text-editor\" data-id=\"110df12\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"acg-faq\"><p><span class=\"TextRun SCXW121171565 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW121171565 BCX8\">Non<\/span><span class=\"NormalTextRun SCXW121171565 BCX8\">. Des <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">mesures<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">peuvent<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">\u00eatre<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">appliqu\u00e9es<\/span><span class=\"NormalTextRun SCXW121171565 BCX8\"> sur <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">l\u2019existant<\/span><span class=\"NormalTextRun SCXW121171565 BCX8\">. Les <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">limites<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">r\u00e9siduelles<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">doivent<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">\u00eatre<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">\u00e9valu\u00e9es<\/span><span class=\"NormalTextRun SCXW121171565 BCX8\"> pour <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">d\u00e9cider<\/span><span class=\"NormalTextRun SCXW121171565 BCX8\"> des <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">\u00e9volutions<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW121171565 BCX8\">n\u00e9cessaires<\/span><span class=\"NormalTextRun SCXW121171565 BCX8\">.<\/span><\/span><span class=\"EOP Selected SCXW121171565 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-1723\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"4\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-1723\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Les recommandations sont-elles directement applicables  <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-1723\" class=\"elementor-element elementor-element-1761082 e-flex e-con-boxed e-con e-child\" data-id=\"1761082\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8d72c41 elementor-widget elementor-widget-text-editor\" data-id=\"8d72c41\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"acg-faq\"><p><span class=\"TextRun SCXW52124774 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW52124774 BCX8\">Elles constituent des <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">pistes<\/span><span class=\"NormalTextRun SCXW52124774 BCX8\"> \u00e0 adapter \u00e0 <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">l\u2019architecture<\/span><span class=\"NormalTextRun SCXW52124774 BCX8\">, aux usages et aux <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">risques<\/span><span class=\"NormalTextRun SCXW52124774 BCX8\">. Leur <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">d\u00e9ploiement<\/span><span class=\"NormalTextRun SCXW52124774 BCX8\"> doit <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">\u00eatre<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">valid\u00e9<\/span><span class=\"NormalTextRun SCXW52124774 BCX8\"> et <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">leur<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">efficacit\u00e9<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW52124774 BCX8\">v\u00e9rifi\u00e9e<\/span><span class=\"NormalTextRun SCXW52124774 BCX8\">.<\/span><\/span><span class=\"EOP Selected SCXW52124774 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:40,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-de09c0c e-con-full e-flex e-con e-child\" data-id=\"de09c0c\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-61b3e42 elementor-widget__width-initial elementor-author-box--image-valign-middle elementor-widget elementor-widget-author-box\" data-id=\"61b3e42\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"author-box.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-author-box\">\n\t\t\t\t\t\t\t<div  class=\"elementor-author-box__avatar\">\n\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/09\/image_2026-09-03_235912370.png\" alt=\"Picture of Rabah Hachichi\" loading=\"lazy\">\n\t\t\t\t<\/div>\n\t\t\t\n\t\t\t<div class=\"elementor-author-box__text\">\n\t\t\t\t\t\t\t\t\t<div >\n\t\t\t\t\t\t<h4 class=\"elementor-author-box__name\">\n\t\t\t\t\t\t\tRabah Hachichi\t\t\t\t\t\t<\/h4>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-author-box__bio\">\n\t\t\t\t\t\t<p>Directeur Technique, ACG Cybersecurity. CISSP, CISM, ISO 27001 Lead Auditor. Vingt-cinq ans en cybers\u00e9curit\u00e9, dont quinze comme RSSI. Auditeur et formateur en continuit\u00e9 d'activit\u00e9 et gestion de crise.<\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2e307a8 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"2e307a8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"chapeau\">Publi\u00e9 le 30 octobre 2026. Mis \u00e0 jour le 30 octobre 2026. Sources v\u00e9rifi\u00e9es le 30 octobre 2026.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-164f455 e-con e-atomic-element e-flexbox-base e-default-div e-f918847 \" data-id=\"164f455\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"164f455\" data-e-type=\"e-flexbox\" data-id=\"164f455\">\n    <div class=\"elementor-element elementor-element-5994c78 e-con-full elementor-hidden-desktop elementor-hidden-tablet e-flex e-con e-child\" data-id=\"5994c78\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2efd5ff elementor-widget elementor-widget-heading\" data-id=\"2efd5ff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Articles les plus lus<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8cb63b2 elementor-grid-eael-col-1 elementor-grid-tablet-eael-col-2 elementor-grid-mobile-eael-col-1 elementor-widget elementor-widget-eael-post-grid\" data-id=\"8cb63b2\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;eael_post_grid_columns&quot;:&quot;eael-col-1&quot;,&quot;eael_post_grid_columns_tablet&quot;:&quot;eael-col-2&quot;,&quot;eael_post_grid_columns_mobile&quot;:&quot;eael-col-1&quot;}\" data-widget_type=\"eael-post-grid.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div id=\"eael-post-grid-8cb63b2\" class=\"eael-post-grid-container\">\n            <div class=\"eael-post-grid eael-post-appender eael-post-appender-8cb63b2 eael-post-grid-style-one\" data-layout-mode=\"masonry\"><article class=\"eael-grid-post  eael-post-grid-column eael-pg-post-31640 category-article tags-cybersecurite-et-ia\" data-id=\"31640\">\n        <div class=\"eael-grid-post-holder\">\n            <div class=\"eael-grid-post-holder-inner\"><div class=\"eael-entry-wrapper\"><header class=\"eael-entry-header\"><h2 class=\"eael-entry-title\"><a class=\"eael-grid-post-link\" href=\"https:\/\/acgcyberacademy.fr\/en\/cybersecurite-et-ia-vers-au-se-deplace-la-valeur-des-competences\/\" title=\"Cybers\u00e9curit\u00e9 et IA : vers a\u00f9 se d\u00e9place la valeur des comp\u00e9tences ?\u00a0\">Cybers\u00e9curit\u00e9 et IA : vers a\u00f9 se d\u00e9place la valeur des comp\u00e9tences ?\u00a0<\/a><\/h2><\/header><div class=\"eael-entry-content\">\n                        <div class=\"eael-grid-post-excerpt\"><a href=\"https:\/\/acgcyberacademy.fr\/en\/cybersecurite-et-ia-vers-au-se-deplace-la-valeur-des-competences\/\" class=\"eael-post-elements-readmore-btn\">Lire l\u2019article<\/a><\/div>\n                    <\/div><\/div><\/div>\n        <\/div>\n    <\/article><article class=\"eael-grid-post  eael-post-grid-column eael-pg-post-30890 category-article tags-securite-de-lintelligence-artificielle\" data-id=\"30890\">\n        <div class=\"eael-grid-post-holder\">\n            <div class=\"eael-grid-post-holder-inner\"><div class=\"eael-entry-wrapper\"><header class=\"eael-entry-header\"><h2 class=\"eael-entry-title\"><a class=\"eael-grid-post-link\" href=\"https:\/\/acgcyberacademy.fr\/en\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/\" title=\"S\u00e9curit\u00e9 de l&rsquo;IA :ce que les normes couvrent, et ce qu&rsquo;elles laissent \u00e0 votre charge\">S\u00e9curit\u00e9 de l&rsquo;IA :ce que les normes couvrent, et ce qu&rsquo;elles laissent \u00e0 votre charge<\/a><\/h2><\/header><div class=\"eael-entry-content\">\n                        <div class=\"eael-grid-post-excerpt\"><a href=\"https:\/\/acgcyberacademy.fr\/en\/securite-de-lia-ce-que-les-normes-couvrent-et-ce-quelles-laissent-a-votre-charge\/\" class=\"eael-post-elements-readmore-btn\">Lire l\u2019article<\/a><\/div>\n                    <\/div><\/div><\/div>\n        <\/div>\n    <\/article><article class=\"eael-grid-post  eael-post-grid-column eael-pg-post-30323 category-article tags-certifications\" data-id=\"30323\">\n        <div class=\"eael-grid-post-holder\">\n            <div class=\"eael-grid-post-holder-inner\"><div class=\"eael-entry-wrapper\"><header class=\"eael-entry-header\"><h2 class=\"eael-entry-title\"><a class=\"eael-grid-post-link\" href=\"https:\/\/acgcyberacademy.fr\/en\/cissp-ce-que-lexamen-evalue-vraiment\/\" title=\"CISSP\u00a0: ce que l&rsquo;examen \u00e9value vraiment\">CISSP\u00a0: ce que l&rsquo;examen \u00e9value vraiment<\/a><\/h2><\/header><div class=\"eael-entry-content\">\n                        <div class=\"eael-grid-post-excerpt\"><a href=\"https:\/\/acgcyberacademy.fr\/en\/cissp-ce-que-lexamen-evalue-vraiment\/\" class=\"eael-post-elements-readmore-btn\">Lire l\u2019article<\/a><\/div>\n                    <\/div><\/div><\/div>\n        <\/div>\n    <\/article><\/div>\n            <div class=\"clearfix\"><\/div>\n        <\/div>            <div class=\"eael-load-more-button-wrap eael-force-hide\">\n                <button class=\"eael-load-more-button\" id=\"eael-load-more-btn-8cb63b2\" data-widget-id=\"8cb63b2\" data-widget=\"8cb63b2\" data-page-id=\"31902\" data-template=\"{&quot;dir&quot;:&quot;lite&quot;,&quot;file_name&quot;:&quot;one.php&quot;,&quot;name&quot;:&quot;Post-Grid&quot;}\" data-class=\"Essential_Addons_Elementor\\Elements\\Post_Grid\" data-layout=\"masonry\" data-page=\"1\" data-args=\"orderby=date&amp;order=desc&amp;ignore_sticky_posts=1&amp;post_status=publish&amp;posts_per_page=3&amp;offset=0&amp;post_type=post&amp;tax_query%5B0%5D%5Btaxonomy%5D=category&amp;tax_query%5B0%5D%5Bfield%5D=term_id&amp;tax_query%5B0%5D%5Bterms%5D%5B0%5D=355&amp;tax_query%5Brelation%5D=AND&amp;post__not_in%5B0%5D=31902&amp;eael_args_sig=e46d0426b8966c922bbab86af211a9fa03c4f5353a360115015ff067d9212905\" data-max-page=\"3\">\n                    <span class=\"eael-btn-loader button__loader\"><\/span>\n                    <span class=\"eael_load_more_text\">Load More<\/span>\n                <\/button>\n            <\/div>\n            \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Articles les plus lus Cybers\u00e9curit\u00e9 et IA : vers a\u00f9 se d\u00e9place la valeur des comp\u00e9tences ?\u00a0 Lire l\u2019article S\u00e9curit\u00e9 de l&#8217;IA :ce que les normes couvrent, et ce qu&#8217;elles laissent \u00e0 votre charge Lire l\u2019article CISSP\u00a0: ce que l&#8217;examen \u00e9value vraiment Lire l\u2019article Load More Formations recommand\u00e9es ISO\/IEC 42001 Lead Auditor CISSP Certification ISC2\u00a0 [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":31993,"comment_status":"closed","ping_status":"open","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"_acf_changed":false,"_glsr_average":0,"_glsr_ranking":0,"_glsr_reviews":0,"footnotes":""},"categories":[355],"tags":[370],"formateur":[],"class_list":["post-31902","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-article","tag-actualites-cybersecurite"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Fuites de donn\u00e9es et s\u00e9curit\u00e9 des acc\u00e8s applicatifs<\/title>\n<meta name=\"description\" content=\"196 fuites de donn\u00e9es signal\u00e9es au CERT-FR en 2025, presque aucune par faille technique. Ce que r\u00e9v\u00e8le le retour d&#039;exp\u00e9rience, et les 10 pistes.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/acgcyberacademy.fr\/en\/fuites-de-donnees-et-securite-des-acces-applicatifs\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Fuites de donn\u00e9es et s\u00e9curit\u00e9 des acc\u00e8s applicatifs\" \/>\n<meta property=\"og:description\" content=\"196 fuites de donn\u00e9es signal\u00e9es au CERT-FR en 2025, presque aucune par faille technique. Ce que r\u00e9v\u00e8le le retour d&#039;exp\u00e9rience, et les 10 pistes.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/acgcyberacademy.fr\/en\/fuites-de-donnees-et-securite-des-acces-applicatifs\/\" \/>\n<meta property=\"og:site_name\" content=\"ACG CyberAcademy\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-30T09:03:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-03T11:04:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-carre-v2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1080\" \/>\n\t<meta property=\"og:image:height\" content=\"1080\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Maya\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Maya\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"16 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/fuites-de-donnees-et-securite-des-acces-applicatifs\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/fuites-de-donnees-et-securite-des-acces-applicatifs\\\/\"},\"author\":{\"name\":\"Maya\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#\\\/schema\\\/person\\\/a61f74bc461db55c34f542ebc827ffbd\"},\"headline\":\"Fuites de donn\u00e9es et s\u00e9curit\u00e9 des acc\u00e8s applicatifs\",\"datePublished\":\"2026-10-30T09:03:40+00:00\",\"dateModified\":\"2026-11-03T11:04:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/fuites-de-donnees-et-securite-des-acces-applicatifs\\\/\"},\"wordCount\":3265,\"publisher\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/fuites-de-donnees-et-securite-des-acces-applicatifs\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/acgcyberacademy.fr\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/certfr-carre-v2.png\",\"keywords\":[\"Actualit\u00e9s cybers\u00e9curit\u00e9\"],\"articleSection\":[\"Article\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/fuites-de-donnees-et-securite-des-acces-applicatifs\\\/\",\"url\":\"https:\\\/\\\/acgcyberacademy.fr\\\/fuites-de-donnees-et-securite-des-acces-applicatifs\\\/\",\"name\":\"Fuites de donn\u00e9es et s\u00e9curit\u00e9 des acc\u00e8s applicatifs\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/fuites-de-donnees-et-securite-des-acces-applicatifs\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/fuites-de-donnees-et-securite-des-acces-applicatifs\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/acgcyberacademy.fr\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/certfr-carre-v2.png\",\"datePublished\":\"2026-10-30T09:03:40+00:00\",\"dateModified\":\"2026-11-03T11:04:41+00:00\",\"description\":\"196 fuites de donn\u00e9es signal\u00e9es au CERT-FR en 2025, presque aucune par faille technique. Ce que r\u00e9v\u00e8le le retour d'exp\u00e9rience, et les 10 pistes.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/fuites-de-donnees-et-securite-des-acces-applicatifs\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/acgcyberacademy.fr\\\/fuites-de-donnees-et-securite-des-acces-applicatifs\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/fuites-de-donnees-et-securite-des-acces-applicatifs\\\/#primaryimage\",\"url\":\"https:\\\/\\\/acgcyberacademy.fr\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/certfr-carre-v2.png\",\"contentUrl\":\"https:\\\/\\\/acgcyberacademy.fr\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/certfr-carre-v2.png\",\"width\":1080,\"height\":1080},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/fuites-de-donnees-et-securite-des-acces-applicatifs\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/acgcyberacademy.fr\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Fuites de donn\u00e9es et s\u00e9curit\u00e9 des acc\u00e8s applicatifs\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#website\",\"url\":\"https:\\\/\\\/acgcyberacademy.fr\\\/\",\"name\":\"ACG Cyber Academy\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/acgcyberacademy.fr\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#organization\",\"name\":\"ACG Cyber Academy\",\"url\":\"https:\\\/\\\/acgcyberacademy.fr\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/acgcyberacademy.fr\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/Untitled-15-2.png\",\"contentUrl\":\"https:\\\/\\\/acgcyberacademy.fr\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/Untitled-15-2.png\",\"width\":1080,\"height\":1080,\"caption\":\"ACG Cyber Academy\"},\"image\":{\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/fr.linkedin.com\\\/company\\\/acg-cybersecurity\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/acgcyberacademy.fr\\\/#\\\/schema\\\/person\\\/a61f74bc461db55c34f542ebc827ffbd\",\"name\":\"Maya\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4ce769e531a368b215ab5f69e995a5c2ac8937ecc71295509417408fe823bd26?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4ce769e531a368b215ab5f69e995a5c2ac8937ecc71295509417408fe823bd26?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4ce769e531a368b215ab5f69e995a5c2ac8937ecc71295509417408fe823bd26?s=96&d=mm&r=g\",\"caption\":\"Maya\"},\"url\":\"https:\\\/\\\/acgcyberacademy.fr\\\/en\\\/author\\\/maya\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Fuites de donn\u00e9es et s\u00e9curit\u00e9 des acc\u00e8s applicatifs","description":"196 fuites de donn\u00e9es signal\u00e9es au CERT-FR en 2025, presque aucune par faille technique. Ce que r\u00e9v\u00e8le le retour d'exp\u00e9rience, et les 10 pistes.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/acgcyberacademy.fr\/en\/fuites-de-donnees-et-securite-des-acces-applicatifs\/","og_locale":"en_GB","og_type":"article","og_title":"Fuites de donn\u00e9es et s\u00e9curit\u00e9 des acc\u00e8s applicatifs","og_description":"196 fuites de donn\u00e9es signal\u00e9es au CERT-FR en 2025, presque aucune par faille technique. Ce que r\u00e9v\u00e8le le retour d'exp\u00e9rience, et les 10 pistes.","og_url":"https:\/\/acgcyberacademy.fr\/en\/fuites-de-donnees-et-securite-des-acces-applicatifs\/","og_site_name":"ACG CyberAcademy","article_published_time":"2026-10-30T09:03:40+00:00","article_modified_time":"2026-11-03T11:04:41+00:00","og_image":[{"width":1080,"height":1080,"url":"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-carre-v2.png","type":"image\/png"}],"author":"Maya","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Maya","Estimated reading time":"16 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/acgcyberacademy.fr\/fuites-de-donnees-et-securite-des-acces-applicatifs\/#article","isPartOf":{"@id":"https:\/\/acgcyberacademy.fr\/fuites-de-donnees-et-securite-des-acces-applicatifs\/"},"author":{"name":"Maya","@id":"https:\/\/acgcyberacademy.fr\/#\/schema\/person\/a61f74bc461db55c34f542ebc827ffbd"},"headline":"Fuites de donn\u00e9es et s\u00e9curit\u00e9 des acc\u00e8s applicatifs","datePublished":"2026-10-30T09:03:40+00:00","dateModified":"2026-11-03T11:04:41+00:00","mainEntityOfPage":{"@id":"https:\/\/acgcyberacademy.fr\/fuites-de-donnees-et-securite-des-acces-applicatifs\/"},"wordCount":3265,"publisher":{"@id":"https:\/\/acgcyberacademy.fr\/#organization"},"image":{"@id":"https:\/\/acgcyberacademy.fr\/fuites-de-donnees-et-securite-des-acces-applicatifs\/#primaryimage"},"thumbnailUrl":"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-carre-v2.png","keywords":["Actualit\u00e9s cybers\u00e9curit\u00e9"],"articleSection":["Article"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/acgcyberacademy.fr\/fuites-de-donnees-et-securite-des-acces-applicatifs\/","url":"https:\/\/acgcyberacademy.fr\/fuites-de-donnees-et-securite-des-acces-applicatifs\/","name":"Fuites de donn\u00e9es et s\u00e9curit\u00e9 des acc\u00e8s applicatifs","isPartOf":{"@id":"https:\/\/acgcyberacademy.fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/acgcyberacademy.fr\/fuites-de-donnees-et-securite-des-acces-applicatifs\/#primaryimage"},"image":{"@id":"https:\/\/acgcyberacademy.fr\/fuites-de-donnees-et-securite-des-acces-applicatifs\/#primaryimage"},"thumbnailUrl":"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-carre-v2.png","datePublished":"2026-10-30T09:03:40+00:00","dateModified":"2026-11-03T11:04:41+00:00","description":"196 fuites de donn\u00e9es signal\u00e9es au CERT-FR en 2025, presque aucune par faille technique. Ce que r\u00e9v\u00e8le le retour d'exp\u00e9rience, et les 10 pistes.","breadcrumb":{"@id":"https:\/\/acgcyberacademy.fr\/fuites-de-donnees-et-securite-des-acces-applicatifs\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/acgcyberacademy.fr\/fuites-de-donnees-et-securite-des-acces-applicatifs\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/acgcyberacademy.fr\/fuites-de-donnees-et-securite-des-acces-applicatifs\/#primaryimage","url":"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-carre-v2.png","contentUrl":"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2026\/10\/certfr-carre-v2.png","width":1080,"height":1080},{"@type":"BreadcrumbList","@id":"https:\/\/acgcyberacademy.fr\/fuites-de-donnees-et-securite-des-acces-applicatifs\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/acgcyberacademy.fr\/"},{"@type":"ListItem","position":2,"name":"Fuites de donn\u00e9es et s\u00e9curit\u00e9 des acc\u00e8s applicatifs"}]},{"@type":"WebSite","@id":"https:\/\/acgcyberacademy.fr\/#website","url":"https:\/\/acgcyberacademy.fr\/","name":"ACG Cyber Academy","description":"","publisher":{"@id":"https:\/\/acgcyberacademy.fr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/acgcyberacademy.fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/acgcyberacademy.fr\/#organization","name":"ACG Cyber Academy","url":"https:\/\/acgcyberacademy.fr\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/acgcyberacademy.fr\/#\/schema\/logo\/image\/","url":"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2025\/10\/Untitled-15-2.png","contentUrl":"https:\/\/acgcyberacademy.fr\/wp-content\/uploads\/2025\/10\/Untitled-15-2.png","width":1080,"height":1080,"caption":"ACG Cyber Academy"},"image":{"@id":"https:\/\/acgcyberacademy.fr\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/fr.linkedin.com\/company\/acg-cybersecurity"]},{"@type":"Person","@id":"https:\/\/acgcyberacademy.fr\/#\/schema\/person\/a61f74bc461db55c34f542ebc827ffbd","name":"Maya","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/4ce769e531a368b215ab5f69e995a5c2ac8937ecc71295509417408fe823bd26?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4ce769e531a368b215ab5f69e995a5c2ac8937ecc71295509417408fe823bd26?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4ce769e531a368b215ab5f69e995a5c2ac8937ecc71295509417408fe823bd26?s=96&d=mm&r=g","caption":"Maya"},"url":"https:\/\/acgcyberacademy.fr\/en\/author\/maya\/"}]}},"_links":{"self":[{"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/posts\/31902","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/comments?post=31902"}],"version-history":[{"count":6,"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/posts\/31902\/revisions"}],"predecessor-version":[{"id":32008,"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/posts\/31902\/revisions\/32008"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/media\/31993"}],"wp:attachment":[{"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/media?parent=31902"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/categories?post=31902"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/tags?post=31902"},{"taxonomy":"formateur","embeddable":true,"href":"https:\/\/acgcyberacademy.fr\/en\/wp-json\/wp\/v2\/formateur?post=31902"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}