{"id":35915,"date":"2018-10-25T14:07:50","date_gmt":"2018-10-25T12:07:50","guid":{"rendered":"https:\/\/www.tranquil.it\/?p=35915"},"modified":"2025-07-18T11:06:52","modified_gmt":"2025-07-18T09:06:52","slug":"know-the-information-system-cybersecmonth-2","status":"publish","type":"post","link":"https:\/\/www.tranquil.it\/en\/know-the-information-system-cybersecmonth-2\/","title":{"rendered":"Know the information system #CyberSecMonth"},"content":{"rendered":"

[et_pb_section fb_built=”1″ _builder_version=”4.27.4″ background_color=”#009EBD” custom_margin=”0px||” custom_padding=”25px||19px||false|false” hover_enabled=”0″ global_colors_info=”{}” background_enable_image=”off” sticky_enabled=”0″][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|39px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_post_title featured_image=”off” text_color=”light” _builder_version=”4.27.4″ text_orientation=”center” hover_enabled=”0″ global_colors_info=”{}” meta=”off” sticky_enabled=”0″][\/et_pb_post_title][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.16″ custom_padding=”0px|0px|0px|0px|false|false” global_colors_info=”{}”][et_pb_row _builder_version=”4.16″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” custom_padding=”40px||0px|” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]As ANSSI enters its second phase of awareness, we continue our Cyber Advices program as part of CyberSecMonth with our second computer graphics dedicated to the importance of knowing your information system.[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.16″ custom_padding=”0|0px|0|0px” global_colors_info=”{}”][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|0px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

The importance of an efficient and secure information system<\/h2>\n

The field of information systems has expanded considerably with the democratization of new technologies. The multiplication of solutions and tools has therefore transformed the information system into a real challenge for organizations. Nowadays, the information system is made up of so many elements (hardware, software, processes…) that each organization has its own information system. It is therefore essential to have an effective information system<\/strong>. And to optimize your information system, you must already know it.[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px||0px” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_image src=”https:\/\/www.tranquil.it\/wp-content\/uploads\/cybersecmonth_infographie_2_HD.jpg” alt=”Infographie %22Connaitre le syst\u00e8me d’information%22″ title_text=”Infographie %22Connaitre le syst\u00e8me d’information%22″ align_tablet=”center” align_phone=”” align_last_edited=”on|desktop” _builder_version=”4.16″ global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|0px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]As you can tell, the performance of an information system lies in its regular maintenance<\/strong>. The more “healthy” this system is, the more secure and therefore effective it is.<\/p>\n

Good practices:<\/h3>\n

Know your Information System and map it<\/h4>\n

A good knowledge of the information system (IS) makes it possible to locate sensitive data<\/strong> (specific to the company’s activity) and therefore to take appropriate security measures<\/strong>. Mapping your information system makes it possible to simplify and locate interventions<\/strong>. The advantage of such a scheme is to quickly identify sensitive data and secure it.<\/p>\n

Inventor regularly your Information System<\/h4>\n

Once your Information system has been mapped, you can start working on its regular inventory. Your schema should not remain ad vitam eternam<\/em> at the bottom of your wiki.<\/p>\n

A regular inventory of the organization’s privileged accounts<\/strong> is essential to protect its sensitive data. This inventory must include all users as well as the various administrative rights. This inventory offers more vigilance regarding intrusion detection<\/strong> and removal of obsolete access<\/strong>.<\/p>\n

If you have not yet started this process, we advise you to start with an inventory of accounts<\/strong> on your Active Directory, with on one side administrator and user accounts. Be careful, everyone must have a user account in your information system, even the park administrators. Admin accounts should only be used to perform administration actions and not to work on a daily basis.<\/p>\n

The arrival and departure procedure<\/h4>\n

Updating your Information System in case of departure can be a ordeal if there is no procedure. You cannot trust your memory to delete access to your Information System. Fortunately, thanks to your diagram, you know the sensitive assets of your Information System and can start developing your arrival and departure procedure.<\/p>\n

The arrival and departure procedure facilitates the maintenance and updating of access to the information system<\/strong>. This procedure makes it possible to act in the event of the creation or deletion of computer accounts, the allocation or modification of rights, the management of physical access, the assignment of mobile equipment and the management of sensitive documents.<\/p>\n

Finally, mastering the equipment connecting to the information system is important to reduce potentially vulnerable entry points<\/strong>. Some of the actions carried out aim at supervised personal or visitor facilities. The implementation of a Wi-Fi network with dedicated SSID<\/strong> remains a highly recommended practice to reduce this risk of vulnerability. Don’t let just anyone into your house!<\/p>\n

Recommended tools:<\/h3>\n

Draw.io<\/a> is a free, intuitive and easy-to-use tool for creating network diagrams. The tool allows to display IP zones<\/strong>, associated addressing plan<\/strong> and routing and security equipment<\/strong> without too much effort. However, it is recommended to host it on your servers for more security.<\/p>\n

Your Active Directory<\/strong> will be your best ally to manage authentications and permissions on your network. Whether with a Microsoft Active Directory or with its Open Source equivalent Samba-AD<\/strong>, you will be able to manage your users’ rights, manage your employees’ inputs and outputs, all via an easy-to-use management console. Tranquil IT has been a Samba expert for more than 13 years and supports you in your migration to Samba Active Directory<\/a> to free you from your Microsoft licenses.[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|0px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

Samba Active Directory, expertise on a European scale<\/h2>\n

[\/et_pb_text][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

Tranquil IT has been using Samba for over 13 years, successfully completing more than 270 projects<\/strong>. This extensive experience has made us the leading integrator<\/strong> of Samba’s Active Directory component in France. Our technical team is highly experienced in conducting IT infrastructure audits<\/a>, Active Directory migrations<\/a>, and domain mergers<\/strong>. Our close relationship with the Samba Team enables us to facilitate both the development of this software and the transfer of skills in Samba Active Directory<\/a> to our clients.<\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.16″ custom_padding=”0px||0px” global_colors_info=”{}”][et_pb_row _builder_version=”4.16″ custom_padding=”40px||0px” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_divider _builder_version=”4.16″ global_colors_info=”{}”][\/et_pb_divider][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|0px|0px|false|false” border_color_all=”#26518f” border_style_all=”dotted” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ header_font=”||||||||” header_2_font=”||||||||” header_3_font=”||||||||” header_3_line_height=”3em” global_colors_info=”{}”]<\/p>\n

CyberSecMonth, a four-part event<\/h2>\n

For the sixth edition of CyberSecMonth, ANSSI is covering the event by organizing it into thematic weeks. Thus, every week many workshops and conferences are organized and focus un the theme of cybersecurity.<\/p>\n

The four ANSSI themes:<\/h3>\n
    \n
  1. To have the basics<\/span> : The first week of October aims to raise awareness among readers about the need to secure their data<\/strong>\u00a0through passwords and encrypted messages<\/strong>. There are good IT practices, recommendations, an awareness kit and even a serious game on cybersecurity<\/a>.<\/li>\n
  2. Knowing the profession<\/span>\u00a0: This week of October focuses on the digital security professions<\/strong> and the different formations<\/strong> in this field. This is an opportunity to review the recent implementation of the General Data Protection Regulations (GDPR).<\/li>\n
  3. Show interest in risks in order to apply good practices <\/span>: This theme focuses on online banking transactions<\/strong> and the risk of credit card fraud<\/strong>. The procedure to follow in the event of a cyber attack is also at the center of this weeks theme.<\/li>\n
  4. Understand tomorrow’s issues<\/span> : ANSSI concludes this CyberSecMonth by trying to anticipate tomorrow’s cyber threats. This theme highlights the specialists who are working to integrate<\/strong> digital security <\/strong> upstream of artificial intelligence projects and connected objects. Thus this approach aims to reduce the vulnerability of computers and networks<\/strong>. ANSSI will also return to the ethical and legal aspect <\/strong>of technological development.<\/li>\n<\/ol>\n

    [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|0px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

    What you don’t want to miss :<\/h2>\n

    What to follow during #CyberSecMonth[\/et_pb_text][et_pb_code _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

    \ud83d\udcfd\ufe0fMes de la ciberseguridad europea \ud83d\udee1\ufe0f- Semana 1: \u00a1los fundamentos! Presentaci\u00f3n fuera de competici\u00f3n de nuestro v\u00eddeo de concienciaci\u00f3n sobre el #phishing<\/a> \ud83c\udfa3en el 2\u00ba #Festival<\/a> de #Cine<\/a> de @EnghienlesBains<\/a>Un soporte de nuestro #KitSensiCyber<\/a> – \ud83d\udd03#ECSM<\/a> #TodosSecNum<\/a> @FilmSecurite<\/a> pic.twitter.com\/wUoLbgLzcf<\/a>\u2014 Cybermalveillance.gouv.fr (@cybervictimes) 2 octubre 2018<\/a><\/p><\/blockquote>\n