La privacy en 2026 : de la conformité documentée à la maîtrise opérationnelle des données Depuis l’entrée en application du RGPD (2018), la privacy s’est progressivement structurée dans les organisations. Beaucoup disposent aujourd’hui d’un registre de traitements, réalisent des analyses…
Tag: risk management strategy & governance
Quantum computing was once exclusively reserved to experts and specialist journals. Today it is widely covered by the mainstream press, and every major regulator has taken up the subject. This media attention has fueled a growing number of warnings, some…
This article explores the challenges of access control in modern data environments, characterized by a growing number of use cases, increasing data volumes, and expanding exposure points. We begin by reviewing the main access management models, as well as data-centric…
Subscription hijacking is a cloud attack first identified on Microsoft Azure: it consists of an attacker successfully transferring an Azure subscription from its original Azure organization to an organization under malicious control. This attack allows the attacker to take full…
Since the massive rise of DevOps, continuous integration and deployment (CI/CD) pipelines have become essential to automate application development cycles. Continuous Integration (CI) involves merging and testing code automatically, while Continuous Deployment (CD) automates the entire process of releasing that…
While AI has proven to be highly effective at increasing productivity in business environments, the next step in its evolution involves enhancing its autonomy and enabling it to perform actions independently. To this end, one notable development in the AI…
Entra ID (formally known as Azure AD) is an Identity and Access Management solution. Through a Cloud-based directory, administrators provision and manage the lifecycle of various identities from Users, Applications to Devices. Unlike Microsoft Active Directory, Entra ID extends its…
The banking sector has rapidly modernized, and online banking has become a matter of course for both banks and their customers. These players are increasingly reliant on the Internet, with all the advantages that implies, but also the risks. At…
L'USB est quasiment incontournable. L'interconnexion non maîtrisée des dispositifs avec le SI est facilitée par les comportements humains. Les moyens d'attaques se perfectionnent et le risque s'accroît, notamment vis-à-vis des attaques ciblées. Une vigilance toute particulière doit être accordée à…
