{"id":54712,"date":"2025-10-05T21:03:37","date_gmt":"2025-10-05T19:03:37","guid":{"rendered":"https:\/\/swissgrc.com\/en\/?p=54712"},"modified":"2025-10-05T21:03:37","modified_gmt":"2025-10-05T19:03:37","slug":"tprm-lecons-des-fonctions-de-securite","status":"publish","type":"post","link":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/","title":{"rendered":"Ce que la gestion des risques cyber li\u00e9s aux tiers peut apprendre des fonctions de s\u00e9curit\u00e9 \u00e9tablies"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"54712\" class=\"elementor elementor-54712\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-35a9138 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"35a9138\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-73cd8ab\" data-id=\"73cd8ab\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5b9f303 tt elementor-widget elementor-widget-text-editor\" data-id=\"5b9f303\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><\/strong><\/p>\n<p id=\"ember3780\" class=\"ember-view reader-text-block__paragraph wp-block-paragraph\"><strong>In today\u2019s interconnected economy, the resilience of an organization is no longer defined only by its own security posture, but by the strength of its extended ecosystem. While third-party cyber risk management (TPCRM) has gained momentum in recent years, it is still evolving. Other domains, however &#8211; such as physical security and supply chain security &#8211; have already built mature frameworks and practices.<\/strong><\/p>\n<p id=\"ember3781\" class=\"ember-view reader-text-block__paragraph\"><strong>The question we should ask is: <\/strong><strong><em>What can TPCRM learn from these established third-party security functions?<\/em><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-570026f elementor-widget elementor-widget-text-editor\" data-id=\"570026f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Looking beyond cyber: Learning from mature models<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f8d0b1e elementor-widget elementor-widget-text-editor\" data-id=\"f8d0b1e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p id=\"ember3783\" class=\"ember-view reader-text-block__paragraph\">Organizations have long faced third-party risks in the physical and supply chain realm. To manage these, entire standards and frameworks have been developed that embed <strong>risk-based approaches, certification schemes, and industry-wide trust models<\/strong>.<\/p>\n<p id=\"ember3784\" class=\"ember-view reader-text-block__paragraph\">Some examples include:<\/p>\n<ul>\n<li><strong>ISO 28000<\/strong> \u2013 A standard focusing on security management systems for the supply chain. It defines how to identify critical assets, assess risks, and build resilience across logistics networks.<\/li>\n<li><strong>TAPA FSR (Transported Asset Protection Association &#8211; Facility Security Requirements)<\/strong> \u2013 A framework widely used in logistics and warehousing to protect high-value goods, with a strong focus on auditable controls and certifications.<\/li>\n<li><strong>CTPAT (Customs Trade Partnership Against Terrorism)<\/strong> \u2013 A US government\u2013business initiative that ensures importers and supply chain partners implement rigorous security practices to safeguard global trade.<\/li>\n<\/ul>\n<div>\u00a0<\/div>\n<p id=\"ember3786\" class=\"ember-view reader-text-block__paragraph\">These frameworks have one thing in common: they <strong>don\u2019t just rely on questionnaires<\/strong> or self-attestations. They embed <strong>standardized controls, verification mechanisms, and industry trust networks<\/strong>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d252e6f elementor-widget elementor-widget-text-editor\" data-id=\"d252e6f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><\/strong><\/p>\n<p class=\"wp-block-paragraph\">There&rsquo;s no need for cybersecurity to reinvent the wheel<\/p>\n<p><strong><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-102a066 elementor-widget elementor-widget-text-editor\" data-id=\"102a066\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p id=\"ember3788\" class=\"ember-view reader-text-block__paragraph\">Too often, <a href=\"https:\/\/swissgrc.com\/en\/tprm-software\" target=\"_blank\" rel=\"noopener\">third-party<\/a> cyber risk management programs rely heavily on spreadsheets, lengthy questionnaires, and inconsistent monitoring. Compared to physical security, this feels immature.<\/p>\n<p id=\"ember3789\" class=\"ember-view reader-text-block__paragraph\">Drawing inspiration from ISO 28000, TAPA FSR, and CTPAT, we can identify three lessons:<\/p>\n<ol>\n<li><strong>Risk-Based Tiering:<\/strong> Not all suppliers are equal. Just as CTPAT differentiates risk tiers in supply chains, TPCRM should define differentiated assurance levels &#8211; high-risk vendors require continuous monitoring and certification, low-risk vendors require lighter oversight.<\/li>\n<li><strong>Independent Validation:<\/strong> Physical security frameworks rely on accredited audits and certifications. Cybersecurity can follow this model by integrating <strong>independent attestation standards<\/strong> (e.g., ISO 27001, ISAE 3000, SOC 2) and industry consortia that reduce redundancy across assessments.<\/li>\n<li><strong>Shared Responsibility Networks:<\/strong> TAPA and CTPAT thrive because they are <strong>industry communities<\/strong>: members share intelligence and benchmarks. Cyber TPCRM should evolve towards similar <strong>collaborative ecosystems <\/strong>(cf. <a class=\"hIUybjcrkfFLLhBnSNRPGtyujTqztdM \" tabindex=\"0\" href=\"https:\/\/fscsc.ch\/en\/\" target=\"_blank\" rel=\"noopener\" data-test-app-aware-link=\"\">Swiss FS-CSC<\/a>), where risk intelligence is pooled, rather than every company reinventing the wheel.<\/li>\n<\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-214c819 elementor-widget elementor-widget-text-editor\" data-id=\"214c819\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><\/strong><\/p>\n<p class=\"wp-block-paragraph\">Towards an integrated view of security<\/p>\n<p><strong><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-25c2b32 elementor-widget elementor-widget-text-editor\" data-id=\"25c2b32\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The lesson is clear: Third-party cyber risk management should <strong>not be an isolated silo<\/strong>. It should be seen as part of a broader <a href=\"https:\/\/asisonline.org\/security-news\/security-topics\/esrm\/\" target=\"_blank\" rel=\"noopener\"><strong>Enterprise Security Risk Management<\/strong><\/a><strong> (ESRM)<\/strong> approach, where logical, physical, and personnel security are converged.<\/p>\n<p>If we align cyber TPCRM with established physical and supply chain models, we can accelerate maturity, reduce redundancy, and &#8211; most importantly &#8211; build real trust across the value chain.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ddbd271 elementor-widget elementor-widget-text-editor\" data-id=\"ddbd271\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><\/strong><\/p>\n<p class=\"wp-block-paragraph\">Conclusion<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8b90e73 elementor-widget elementor-widget-text-editor\" data-id=\"8b90e73\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p id=\"ember3795\" class=\"ember-view reader-text-block__paragraph\">Cybersecurity leaders don\u2019t need to start from scratch. Decades of experience in <strong>physical and supply chain third-party security<\/strong> have already shown what works: risk-based tiering, independent validation, and trusted communities.<\/p>\n<p id=\"ember3796\" class=\"ember-view reader-text-block__paragraph\">As CISOs and risk advisors, our task is not just to protect the digital perimeter, but to embed <strong>cyber resilience into the same trust frameworks that already safeguard goods, people, and supply chains<\/strong>.<\/p>\n<p id=\"ember3797\" class=\"ember-view reader-text-block__paragraph\"><strong>What about you, do you see further lessons TPCRM can learn from already established functions?<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Dans l&rsquo;\u00e9conomie interconnect\u00e9e d&rsquo;aujourd&rsquo;hui, la r\u00e9silience d&rsquo;une organisation ne d\u00e9pend pas uniquement de sa propre posture de s\u00e9curit\u00e9, mais de la solidit\u00e9 de son \u00e9cosyst\u00e8me \u00e9tendu. Si la gestion des risques cyber li\u00e9s aux tiers (TPCRM) continue d&rsquo;\u00e9voluer, la s\u00e9curit\u00e9 physique et celle de la cha\u00eene d&rsquo;approvisionnement disposent depuis longtemps de r\u00e9f\u00e9rentiels matures. La question est : que peut en apprendre la TPCRM ?<\/p>\n","protected":false},"author":5,"featured_media":54714,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"_eb_attr":"","_swissgrc_real_author":"Marc Etienne Cortesi","real_author_title":"CISO, Baloise Group","real_author_bio":"Marc Etienne Cortesi est Chief Information Security Officer (CISO) chez Baloise Group et membre du conseil d'administration du Swiss Financial Center \u2013 Cyber Security Centre. Il enseigne \u00e9galement dans le cadre du master en s\u00e9curit\u00e9 de l'information et cyber \u00e0 la Lucerne University of Applied Sciences and Arts.","real_author_photo":54710,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[29,68],"tags":[],"class_list":["post-54712","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-information-security","category-tprm"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"Dans l&#039;\u00e9conomie interconnect\u00e9e d&#039;aujourd&#039;hui, la r\u00e9silience d&#039;une organisation ne d\u00e9pend pas uniquement de sa propre posture de s\u00e9curit\u00e9, mais de la solidit\u00e9 de son \u00e9cosyst\u00e8me \u00e9tendu. Si la gestion des risques cyber li\u00e9s aux tiers (TPCRM) continue d&#039;\u00e9voluer, la s\u00e9curit\u00e9 physique et celle de la cha\u00eene d&#039;approvisionnement disposent depuis longtemps de r\u00e9f\u00e9rentiels matures. La question est : que peut en apprendre la TPCRM ?\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"superadmin\"\/>\n\t<meta name=\"google-site-verification\" content=\"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Swiss GRC (FR) | Governance, Risk &amp; Compliance (GRC)\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Ce que la gestion des risques cyber li\u00e9s aux tiers peut apprendre des fonctions de s\u00e9curit\u00e9 \u00e9tablies | Swiss GRC (FR)\" \/>\n\t\t<meta property=\"og:description\" content=\"Dans l&#039;\u00e9conomie interconnect\u00e9e d&#039;aujourd&#039;hui, la r\u00e9silience d&#039;une organisation ne d\u00e9pend pas uniquement de sa propre posture de s\u00e9curit\u00e9, mais de la solidit\u00e9 de son \u00e9cosyst\u00e8me \u00e9tendu. Si la gestion des risques cyber li\u00e9s aux tiers (TPCRM) continue d&#039;\u00e9voluer, la s\u00e9curit\u00e9 physique et celle de la cha\u00eene d&#039;approvisionnement disposent depuis longtemps de r\u00e9f\u00e9rentiels matures. La question est : que peut en apprendre la TPCRM ?\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/swissgrc.com\/fr\/wp-content\/uploads\/sites\/3\/2025\/10\/TPRM.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/swissgrc.com\/fr\/wp-content\/uploads\/sites\/3\/2025\/10\/TPRM.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-10-05T19:03:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-10-05T19:03:37+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@SwissGRC\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Ce que la gestion des risques cyber li\u00e9s aux tiers peut apprendre des fonctions de s\u00e9curit\u00e9 \u00e9tablies | Swiss GRC (FR)\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Dans l&#039;\u00e9conomie interconnect\u00e9e d&#039;aujourd&#039;hui, la r\u00e9silience d&#039;une organisation ne d\u00e9pend pas uniquement de sa propre posture de s\u00e9curit\u00e9, mais de la solidit\u00e9 de son \u00e9cosyst\u00e8me \u00e9tendu. Si la gestion des risques cyber li\u00e9s aux tiers (TPCRM) continue d&#039;\u00e9voluer, la s\u00e9curit\u00e9 physique et celle de la cha\u00eene d&#039;approvisionnement disposent depuis longtemps de r\u00e9f\u00e9rentiels matures. La question est : que peut en apprendre la TPCRM ?\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@SwissGRC\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/swissgrc.com\/fr\/wp-content\/uploads\/sites\/3\/2025\/10\/TPRM.jpg\" \/>\n\t\t<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t\t<meta name=\"twitter:data1\" content=\"superadmin\" \/>\n\t\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/tprm-lecons-des-fonctions-de-securite\\\/#blogposting\",\"name\":\"Ce que la gestion des risques cyber li\\u00e9s aux tiers peut apprendre des fonctions de s\\u00e9curit\\u00e9 \\u00e9tablies | Swiss GRC (FR)\",\"headline\":\"Ce que la gestion des risques cyber li\\u00e9s aux tiers peut apprendre des fonctions de s\\u00e9curit\\u00e9 \\u00e9tablies\",\"author\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/author\\\/superadmin\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2025\\\/10\\\/TPRM.jpg\",\"width\":1280,\"height\":720,\"caption\":\"What Third-Party Cyber Risk Management can learn from established security functions\"},\"datePublished\":\"2025-10-05T21:03:37+02:00\",\"dateModified\":\"2025-10-05T21:03:37+02:00\",\"inLanguage\":\"fr-FR\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/tprm-lecons-des-fonctions-de-securite\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/tprm-lecons-des-fonctions-de-securite\\\/#webpage\"},\"articleSection\":\"Information Security, TPRM\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/tprm-lecons-des-fonctions-de-securite\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/category\\\/information-security\\\/#listItem\",\"name\":\"Information Security\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/category\\\/information-security\\\/#listItem\",\"position\":2,\"name\":\"Information Security\",\"item\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/category\\\/information-security\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/tprm-lecons-des-fonctions-de-securite\\\/#listItem\",\"name\":\"Ce que la gestion des risques cyber li\\u00e9s aux tiers peut apprendre des fonctions de s\\u00e9curit\\u00e9 \\u00e9tablies\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/tprm-lecons-des-fonctions-de-securite\\\/#listItem\",\"position\":3,\"name\":\"Ce que la gestion des risques cyber li\\u00e9s aux tiers peut apprendre des fonctions de s\\u00e9curit\\u00e9 \\u00e9tablies\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/category\\\/information-security\\\/#listItem\",\"name\":\"Information Security\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/#organization\",\"name\":\"Swiss GRC AG\",\"description\":\"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/\",\"telephone\":\"+41412207500\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/06\\\/Logo_V1_Original_mit_Claim.png\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/tprm-lecons-des-fonctions-de-securite\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/tprm-lecons-des-fonctions-de-securite\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.twitter.com\\\/SwissGRC\",\"https:\\\/\\\/www.instagram.com\\\/swissgrc\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCy4QuXYekCQrA4n5oEwJSJg\",\"https:\\\/\\\/ch.linkedin.com\\\/company\\\/swissgrc\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/author\\\/superadmin\\\/#author\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/author\\\/superadmin\\\/\",\"name\":\"superadmin\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/tprm-lecons-des-fonctions-de-securite\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/75672523c5e2db95feb2c8c3d6cf134b011e26e6f14621731855ff4a8c3327d7?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"superadmin\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/tprm-lecons-des-fonctions-de-securite\\\/#webpage\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/tprm-lecons-des-fonctions-de-securite\\\/\",\"name\":\"Ce que la gestion des risques cyber li\\u00e9s aux tiers peut apprendre des fonctions de s\\u00e9curit\\u00e9 \\u00e9tablies | Swiss GRC (FR)\",\"description\":\"Dans l'\\u00e9conomie interconnect\\u00e9e d'aujourd'hui, la r\\u00e9silience d'une organisation ne d\\u00e9pend pas uniquement de sa propre posture de s\\u00e9curit\\u00e9, mais de la solidit\\u00e9 de son \\u00e9cosyst\\u00e8me \\u00e9tendu. Si la gestion des risques cyber li\\u00e9s aux tiers (TPCRM) continue d'\\u00e9voluer, la s\\u00e9curit\\u00e9 physique et celle de la cha\\u00eene d'approvisionnement disposent depuis longtemps de r\\u00e9f\\u00e9rentiels matures. La question est : que peut en apprendre la TPCRM ?\",\"inLanguage\":\"fr-FR\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/tprm-lecons-des-fonctions-de-securite\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/author\\\/superadmin\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/author\\\/superadmin\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2025\\\/10\\\/TPRM.jpg\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/tprm-lecons-des-fonctions-de-securite\\\/#mainImage\",\"width\":1280,\"height\":720,\"caption\":\"What Third-Party Cyber Risk Management can learn from established security functions\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/tprm-lecons-des-fonctions-de-securite\\\/#mainImage\"},\"datePublished\":\"2025-10-05T21:03:37+02:00\",\"dateModified\":\"2025-10-05T21:03:37+02:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/#website\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/\",\"name\":\"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM\",\"description\":\"Governance, Risk & Compliance (GRC)\",\"inLanguage\":\"fr-FR\",\"publisher\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>Ce que la gestion des risques cyber li\u00e9s aux tiers peut apprendre des fonctions de s\u00e9curit\u00e9 \u00e9tablies | Swiss GRC (FR)<\/title>\n\n","aioseo_head_json":{"title":"Ce que la gestion des risques cyber li\u00e9s aux tiers peut apprendre des fonctions de s\u00e9curit\u00e9 \u00e9tablies | Swiss GRC (FR)","description":"Dans l'\u00e9conomie interconnect\u00e9e d'aujourd'hui, la r\u00e9silience d'une organisation ne d\u00e9pend pas uniquement de sa propre posture de s\u00e9curit\u00e9, mais de la solidit\u00e9 de son \u00e9cosyst\u00e8me \u00e9tendu. Si la gestion des risques cyber li\u00e9s aux tiers (TPCRM) continue d'\u00e9voluer, la s\u00e9curit\u00e9 physique et celle de la cha\u00eene d'approvisionnement disposent depuis longtemps de r\u00e9f\u00e9rentiels matures. La question est : que peut en apprendre la TPCRM ?","canonical_url":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/#blogposting","name":"Ce que la gestion des risques cyber li\u00e9s aux tiers peut apprendre des fonctions de s\u00e9curit\u00e9 \u00e9tablies | Swiss GRC (FR)","headline":"Ce que la gestion des risques cyber li\u00e9s aux tiers peut apprendre des fonctions de s\u00e9curit\u00e9 \u00e9tablies","author":{"@id":"https:\/\/swissgrc.com\/fr\/author\/superadmin\/#author"},"publisher":{"@id":"https:\/\/swissgrc.com\/fr\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/fr\/wp-content\/uploads\/sites\/3\/2025\/10\/TPRM.jpg","width":1280,"height":720,"caption":"What Third-Party Cyber Risk Management can learn from established security functions"},"datePublished":"2025-10-05T21:03:37+02:00","dateModified":"2025-10-05T21:03:37+02:00","inLanguage":"fr-FR","mainEntityOfPage":{"@id":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/#webpage"},"isPartOf":{"@id":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/#webpage"},"articleSection":"Information Security, TPRM"},{"@type":"BreadcrumbList","@id":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/fr\/#listItem","position":1,"name":"Home","item":"https:\/\/swissgrc.com\/fr\/","nextItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/fr\/category\/information-security\/#listItem","name":"Information Security"}},{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/fr\/category\/information-security\/#listItem","position":2,"name":"Information Security","item":"https:\/\/swissgrc.com\/fr\/category\/information-security\/","nextItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/#listItem","name":"Ce que la gestion des risques cyber li\u00e9s aux tiers peut apprendre des fonctions de s\u00e9curit\u00e9 \u00e9tablies"},"previousItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/fr\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/#listItem","position":3,"name":"Ce que la gestion des risques cyber li\u00e9s aux tiers peut apprendre des fonctions de s\u00e9curit\u00e9 \u00e9tablies","previousItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/fr\/category\/information-security\/#listItem","name":"Information Security"}}]},{"@type":"Organization","@id":"https:\/\/swissgrc.com\/fr\/#organization","name":"Swiss GRC AG","description":"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.","url":"https:\/\/swissgrc.com\/fr\/","telephone":"+41412207500","logo":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2023\/06\/Logo_V1_Original_mit_Claim.png","@id":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/#organizationLogo"},"image":{"@id":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/#organizationLogo"},"sameAs":["https:\/\/www.twitter.com\/SwissGRC","https:\/\/www.instagram.com\/swissgrc\/","https:\/\/www.youtube.com\/channel\/UCy4QuXYekCQrA4n5oEwJSJg","https:\/\/ch.linkedin.com\/company\/swissgrc"]},{"@type":"Person","@id":"https:\/\/swissgrc.com\/fr\/author\/superadmin\/#author","url":"https:\/\/swissgrc.com\/fr\/author\/superadmin\/","name":"superadmin","image":{"@type":"ImageObject","@id":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/75672523c5e2db95feb2c8c3d6cf134b011e26e6f14621731855ff4a8c3327d7?s=96&d=mm&r=g","width":96,"height":96,"caption":"superadmin"}},{"@type":"WebPage","@id":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/#webpage","url":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/","name":"Ce que la gestion des risques cyber li\u00e9s aux tiers peut apprendre des fonctions de s\u00e9curit\u00e9 \u00e9tablies | Swiss GRC (FR)","description":"Dans l'\u00e9conomie interconnect\u00e9e d'aujourd'hui, la r\u00e9silience d'une organisation ne d\u00e9pend pas uniquement de sa propre posture de s\u00e9curit\u00e9, mais de la solidit\u00e9 de son \u00e9cosyst\u00e8me \u00e9tendu. Si la gestion des risques cyber li\u00e9s aux tiers (TPCRM) continue d'\u00e9voluer, la s\u00e9curit\u00e9 physique et celle de la cha\u00eene d'approvisionnement disposent depuis longtemps de r\u00e9f\u00e9rentiels matures. La question est : que peut en apprendre la TPCRM ?","inLanguage":"fr-FR","isPartOf":{"@id":"https:\/\/swissgrc.com\/fr\/#website"},"breadcrumb":{"@id":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/#breadcrumblist"},"author":{"@id":"https:\/\/swissgrc.com\/fr\/author\/superadmin\/#author"},"creator":{"@id":"https:\/\/swissgrc.com\/fr\/author\/superadmin\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/fr\/wp-content\/uploads\/sites\/3\/2025\/10\/TPRM.jpg","@id":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/#mainImage","width":1280,"height":720,"caption":"What Third-Party Cyber Risk Management can learn from established security functions"},"primaryImageOfPage":{"@id":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/#mainImage"},"datePublished":"2025-10-05T21:03:37+02:00","dateModified":"2025-10-05T21:03:37+02:00"},{"@type":"WebSite","@id":"https:\/\/swissgrc.com\/fr\/#website","url":"https:\/\/swissgrc.com\/fr\/","name":"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM","description":"Governance, Risk & Compliance (GRC)","inLanguage":"fr-FR","publisher":{"@id":"https:\/\/swissgrc.com\/fr\/#organization"}}]},"og:locale":"fr_FR","og:site_name":"Swiss GRC (FR) | Governance, Risk &amp; Compliance (GRC)","og:type":"article","og:title":"Ce que la gestion des risques cyber li\u00e9s aux tiers peut apprendre des fonctions de s\u00e9curit\u00e9 \u00e9tablies | Swiss GRC (FR)","og:description":"Dans l'\u00e9conomie interconnect\u00e9e d'aujourd'hui, la r\u00e9silience d'une organisation ne d\u00e9pend pas uniquement de sa propre posture de s\u00e9curit\u00e9, mais de la solidit\u00e9 de son \u00e9cosyst\u00e8me \u00e9tendu. Si la gestion des risques cyber li\u00e9s aux tiers (TPCRM) continue d'\u00e9voluer, la s\u00e9curit\u00e9 physique et celle de la cha\u00eene d'approvisionnement disposent depuis longtemps de r\u00e9f\u00e9rentiels matures. La question est : que peut en apprendre la TPCRM ?","og:url":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/","og:image":"https:\/\/swissgrc.com\/fr\/wp-content\/uploads\/sites\/3\/2025\/10\/TPRM.jpg","og:image:secure_url":"https:\/\/swissgrc.com\/fr\/wp-content\/uploads\/sites\/3\/2025\/10\/TPRM.jpg","og:image:width":1280,"og:image:height":720,"article:published_time":"2025-10-05T19:03:37+00:00","article:modified_time":"2025-10-05T19:03:37+00:00","twitter:card":"summary_large_image","twitter:site":"@SwissGRC","twitter:title":"Ce que la gestion des risques cyber li\u00e9s aux tiers peut apprendre des fonctions de s\u00e9curit\u00e9 \u00e9tablies | Swiss GRC (FR)","twitter:description":"Dans l'\u00e9conomie interconnect\u00e9e d'aujourd'hui, la r\u00e9silience d'une organisation ne d\u00e9pend pas uniquement de sa propre posture de s\u00e9curit\u00e9, mais de la solidit\u00e9 de son \u00e9cosyst\u00e8me \u00e9tendu. Si la gestion des risques cyber li\u00e9s aux tiers (TPCRM) continue d'\u00e9voluer, la s\u00e9curit\u00e9 physique et celle de la cha\u00eene d'approvisionnement disposent depuis longtemps de r\u00e9f\u00e9rentiels matures. La question est : que peut en apprendre la TPCRM ?","twitter:creator":"@SwissGRC","twitter:image":"https:\/\/swissgrc.com\/fr\/wp-content\/uploads\/sites\/3\/2025\/10\/TPRM.jpg","twitter:label1":"Written by","twitter:data1":"superadmin","twitter:label2":"Est. reading time","twitter:data2":"3 minutes"},"aioseo_meta_data":{"post_id":"54712","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":true,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-09-17 14:15:04","breadcrumb_settings":null,"limit_modified_date":false,"open_ai":null,"ai":null,"created":"2026-09-17 14:00:17","updated":"2026-09-17 14:41:59","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/swissgrc.com\/fr\/\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/swissgrc.com\/fr\/category\/information-security\/\" title=\"Information Security\">Information Security<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\tCe que la gestion des risques cyber li\u00e9s aux tiers peut apprendre des fonctions de s\u00e9curit\u00e9 \u00e9tablies\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/swissgrc.com\/fr\/"},{"label":"Information Security","link":"https:\/\/swissgrc.com\/fr\/category\/information-security\/"},{"label":"Ce que la gestion des risques cyber li\u00e9s aux tiers peut apprendre des fonctions de s\u00e9curit\u00e9 \u00e9tablies","link":"https:\/\/swissgrc.com\/fr\/tprm-lecons-des-fonctions-de-securite\/"}],"_links":{"self":[{"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/posts\/54712","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/comments?post=54712"}],"version-history":[{"count":0,"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/posts\/54712\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/media\/54714"}],"wp:attachment":[{"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/media?parent=54712"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/categories?post=54712"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/tags?post=54712"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}