Professor Jean Peeters, holder of the Cyber and Digital Sovereignty Chair - IHEDN, was present at the European Cyber Week, held in Rennes from 16 to 18 November.
To mark the’European Cyber Week 2021, the professor Jean Peeters, Chairholder, The Chairman of the Board of Directors of the European Security and Defence Policy (ESDP) Group, Mr. Jean-Claude Dupuis, took part in a round-table discussion on «The work being done to identify and respond to new threats». The aim of the discussion was to answer questions such as: What are the new threats being feared? What can be done in anticipation, and how can attacks be identified in advance? What organisational and structural responses are being proposed by industry? Is the use of AI an asset? Could it represent a threat?
After presenting the general and scientific objective of the Chair, Jean Peeters focused on two projects currently being carried out by the Chair: the first, in the form of a thesis entitled «Cybersecurity and service providers. Legal management of cyber risk in supply chains».», the other in the form of a research project «Assessment of the lack of digital sovereignty of open source critical components».».
In both cases, the aim is to study external supply chains, which are the source of a large number of attacks, in order to draw up recommendations.
In the thesis, under the supervision of Professor Michel Séjean (Université Bretagne Sud), a researcher associated with the Chair, the doctoral student Élouan Buisson, examines the legal conditions that enable a company to protect itself against the cyber risks associated with its relationships with small and medium-sized suppliers. This involves distinguishing risks in incoming and outgoing supply chains, identifying applicable laws, drafting contract clauses and managing residual risk through cyber insurance.
The research project under the responsibility of Jean Leneutre, Deputy Chair, and Stefano Zacchiroli (Télécom Paris, Institut Polytechnique de Paris) aims, through the study of a certain number of use cases and popular development practices in these ecosystems, to define a methodology: What are the critical dependencies? Who produces these projects? In which countries are they located? What is the applicable law? Is there a risk of unavailability? What would be the impact? And of course: what recommendations should our companies and national organisations make?
The two initiatives supported by the Chair, using different but complementary approaches, aim to contribute to the national effort to defend France's strategic interests and digital sovereignty.
