🇫🇷 France (ANSSI)

ANSSI — French cyber-hygiene and security guidance

The reference recommendations from France's national cybersecurity agency, turning essential cyber-hygiene into measurable controls.

What is ANSSI?

ANSSI (Agence nationale de la sécurité des systèmes d'information) is France's national cybersecurity authority. Its guide d'hygiène informatique sets out essential measures every organisation should implement to raise its baseline security.

ANSSI guidance is widely referenced by French public bodies, operators of vital importance (OIV/OSE) and private organisations preparing for NIS2.

ANSSI cyber-hygiene themes

Know & secure the IS

Inventory, mapping, secure configuration and administration.

Authenticate & control access

Strong authentication, least privilege, account management.

Operate securely

Updates, backups, logging, anti-malware, network segmentation.

Respond & improve

Detection, incident handling and continuous improvement.

ANSSI with ResiPlan

ResiPlan maps ANSSI's essential measures into a maturity GAP analysis with evidence and reporting.

ANSSI is assessed on its own: ratings from ISO 27001 or NIS2 do not carry over.

See all 15 covered frameworks The cross-mapping engine

Frequently asked questions

What is the ANSSI guide d'hygiène informatique?

A set of essential cyber-hygiene measures published by France's ANSSI that every organisation should implement to establish a sound security baseline.

Is ANSSI guidance mandatory?

It is the reference baseline for French public bodies and critical operators, and a recognised foundation for NIS2 preparation. ResiPlan assesses it separately from ISO 27001 and NIS2.

Other frameworks

ResiPlan covers 15 frameworks. ISO 27001, NIS2, CyFun, CYRA, BIO are linked: a rating carries over where the correspondence is exact. The others are assessed separately.

ISO 27001 NIS2 DORA 🇳🇱 CYRA 🇧🇪 CyFun 🇩🇪 BSI IT-Grundschutz 🇳🇱 BIO 🇪🇸 ENS 🇮🇹 FNCS

Assess your ANSSI compliance

Run a maturity gap analysis, attach your evidence and generate a report — with cross-mapping to the other frameworks.