{"id":70886,"date":"2026-05-06T17:30:09","date_gmt":"2026-05-06T15:30:09","guid":{"rendered":"https:\/\/swissgrc.com\/fr\/?p=70886"},"modified":"2026-09-17T15:00:14","modified_gmt":"2026-09-17T13:00:14","slug":"nis2-pas-projet-informatique-repenser-cybersecurite__trashed","status":"publish","type":"post","link":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/","title":{"rendered":"NIS2 n&rsquo;est pas un projet informatique : pourquoi les entreprises doivent repenser leur cybers\u00e9curit\u00e9"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"70886\" class=\"elementor elementor-70886\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-35a9138 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"35a9138\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-73cd8ab\" data-id=\"73cd8ab\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5b9f303 tt elementor-widget elementor-widget-text-editor\" data-id=\"5b9f303\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><\/strong><\/p>\n<p class=\"wp-block-paragraph\" data-start=\"331\" data-end=\"445\"><strong>Lorsqu&rsquo;il est question de NIS2 aujourd&rsquo;hui, une comparaison revient sans cesse&nbsp;: \u00ab&nbsp;ce sera le RGPD de la cybers\u00e9curit\u00e9&nbsp;\u00bb. Elle para\u00eet logique, mais elle est trompeuse et engage de nombreuses organisations sur une mauvaise voie.<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3c9f65d elementor-widget elementor-widget-html\" data-id=\"3c9f65d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<!-- NIS2 Blog Content (EN) \u2013 Swiss GRC | Paste as HTML Widget in Elementor -->\r\n<!--\r\n  LINK VERIFICATION CHECKLIST \u2013 please confirm slugs before publishing:\r\n  \u2713 \/en\/when-grc-stopped-being-periodic-and-became-everyday-work\/   confirmed via sitemap\r\n  \u2713 \/en\/when-risk-enters-through-the-front-door-rethinking-vendor-risk-management\/   confirmed via sitemap\r\n  ? \/en\/risk-management-software\/   please verify\r\n  ? \/en\/tprm-software\/              please verify\r\n  ? \/en\/solutions\/                  please verify\r\n  ? \/en\/discoverycall\/              please verify\r\n-->\r\n<style>\r\n.sgrc-nis2 {\r\n  font-size: 14px;\r\n  color: #585858;\r\n  line-height: 1.85;\r\n}\r\n.sgrc-nis2 a {\r\n  color: #B82850;\r\n  text-decoration: none;\r\n  border-bottom: 1px solid rgba(184,40,80,0.25);\r\n  transition: border-color 0.15s, color 0.15s;\r\n}\r\n.sgrc-nis2 a:hover {\r\n  color: #8f1f3c;\r\n  border-bottom-color: #8f1f3c;\r\n}\r\n.sgrc-nis2 a[target=\"_blank\"]::after {\r\n  content: ' \u2197';\r\n  font-size: 11px;\r\n  opacity: 0.6;\r\n}\r\n.sgrc-nis2 h2 {\r\n  font-size: 18px;\r\n  font-weight: 700;\r\n  color: #2c2c2c;\r\n  margin: 2.8rem 0 1rem;\r\n  line-height: 1.35;\r\n}\r\n.sgrc-nis2 p { margin: 0 0 1.1rem; }\r\n.sgrc-nis2 .nis2-highlight {\r\n  background: #eef2fc;\r\n  border-left: 3px solid #175CFF;\r\n  padding: 1rem 1.3rem;\r\n  border-radius: 0 6px 6px 0;\r\n  margin: 1.5rem 0;\r\n  font-weight: 600;\r\n  color: #002478;\r\n  font-size: 14px;\r\n  line-height: 1.6;\r\n}\r\n.sgrc-nis2 .nis2-infobox {\r\n  background: #f5f7fb;\r\n  border: 1px solid #D4DAE5;\r\n  border-radius: 8px;\r\n  padding: 1.3rem 1.5rem;\r\n  margin: 1.5rem 0;\r\n  font-size: 13.5px;\r\n}\r\n.sgrc-nis2 .nis2-infobox-title {\r\n  font-weight: 700;\r\n  font-size: 12px;\r\n  letter-spacing: 0.09em;\r\n  text-transform: uppercase;\r\n  color: #3a3a3a;\r\n  margin-bottom: 0.65rem;\r\n}\r\n.sgrc-nis2 .nis2-list {\r\n  list-style: none;\r\n  padding: 0;\r\n  margin: 0.5rem 0 1.5rem;\r\n  display: flex;\r\n  flex-direction: column;\r\n  gap: 0.45rem;\r\n}\r\n.sgrc-nis2 .nis2-list li {\r\n  display: flex;\r\n  align-items: flex-start;\r\n  gap: 0.7rem;\r\n  padding: 0.5rem 0.75rem;\r\n  border-radius: 5px;\r\n  transition: background 0.15s;\r\n}\r\n.sgrc-nis2 .nis2-list li:hover { background: #f5f7fb; }\r\n.sgrc-nis2 .nis2-list li::before {\r\n  content: \"\u203a\";\r\n  color: #175CFF;\r\n  font-weight: 700;\r\n  font-size: 16px;\r\n  line-height: 1.5;\r\n  flex-shrink: 0;\r\n}\r\n.sgrc-nis2 .nis2-stat {\r\n  display: flex;\r\n  align-items: center;\r\n  gap: 1.4rem;\r\n  background: #1A2E4C;\r\n  color: #fff;\r\n  padding: 1.3rem 1.8rem;\r\n  border-radius: 8px;\r\n  margin: 2rem 0;\r\n}\r\n.sgrc-nis2 .nis2-stat-number {\r\n  font-size: 40px;\r\n  font-weight: 700;\r\n  color: #fff;\r\n  line-height: 1;\r\n  white-space: nowrap;\r\n}\r\n.sgrc-nis2 .nis2-stat-number span { color: #175CFF; }\r\n.sgrc-nis2 .nis2-stat-label {\r\n  font-size: 13.5px;\r\n  color: rgba(255,255,255,0.72);\r\n  line-height: 1.65;\r\n}\r\n.sgrc-nis2 .nis2-stat-label strong { color: #fff; }\r\n.sgrc-nis2 .nis2-stat-label a {\r\n  color: rgba(255,255,255,0.55);\r\n  border-bottom-color: rgba(255,255,255,0.2);\r\n  font-size: 11.5px;\r\n}\r\n.sgrc-nis2 .nis2-tags {\r\n  display: flex;\r\n  flex-wrap: wrap;\r\n  gap: 0.45rem;\r\n  margin: 0.75rem 0 1.5rem;\r\n}\r\n.sgrc-nis2 .nis2-tag {\r\n  background: #eef0f3;\r\n  color: #3a3a3a;\r\n  font-size: 12.5px;\r\n  font-weight: 600;\r\n  padding: 0.3rem 0.85rem;\r\n  border-radius: 100px;\r\n  border-bottom: none !important;\r\n}\r\n.sgrc-nis2 .nis2-table {\r\n  width: 100%;\r\n  border-collapse: collapse;\r\n  font-size: 13.5px;\r\n  margin: 1.5rem 0 2rem;\r\n  border-radius: 8px;\r\n  overflow: hidden;\r\n  border: 1px solid #D4DAE5;\r\n}\r\n.sgrc-nis2 .nis2-table thead tr { background: #1A2E4C; color: #fff; }\r\n.sgrc-nis2 .nis2-table thead th {\r\n  padding: 0.85rem 1.1rem;\r\n  text-align: left;\r\n  font-weight: 600;\r\n  font-size: 13px;\r\n  letter-spacing: 0.04em;\r\n}\r\n.sgrc-nis2 .nis2-table thead th:first-child { width: 30%; }\r\n.sgrc-nis2 .nis2-table tbody tr { border-bottom: 1px solid #D4DAE5; }\r\n.sgrc-nis2 .nis2-table tbody tr:last-child { border-bottom: none; }\r\n.sgrc-nis2 .nis2-table tbody tr:hover { background: #f5f7fb; }\r\n.sgrc-nis2 .nis2-table tbody td {\r\n  padding: 0.8rem 1.1rem;\r\n  vertical-align: top;\r\n  line-height: 1.6;\r\n  color: #585858;\r\n}\r\n.sgrc-nis2 .nis2-table tbody td:first-child {\r\n  font-weight: 600;\r\n  color: #3a3a3a;\r\n  border-right: 1px solid #D4DAE5;\r\n}\r\n.sgrc-nis2 .nis2-table .col-gdpr { color: #666; }\r\n.sgrc-nis2 .nis2-table .col-nis2 { color: #002478; font-weight: 500; }\r\n.sgrc-nis2 .nis2-grid {\r\n  display: grid;\r\n  grid-template-columns: 1fr 1fr;\r\n  gap: 1px;\r\n  background: #D4DAE5;\r\n  border: 1px solid #D4DAE5;\r\n  border-radius: 8px;\r\n  overflow: hidden;\r\n  margin: 1.2rem 0 2rem;\r\n}\r\n.sgrc-nis2 .nis2-cell {\r\n  background: #fff;\r\n  padding: 1.1rem 1.3rem;\r\n  transition: background 0.15s;\r\n}\r\n.sgrc-nis2 .nis2-cell:hover { background: #eef2fc; }\r\n.sgrc-nis2 .nis2-cell strong {\r\n  display: block;\r\n  font-size: 13px;\r\n  font-weight: 700;\r\n  color: #2c2c2c;\r\n  margin-bottom: 0.25rem;\r\n}\r\n.sgrc-nis2 .nis2-cell span {\r\n  font-size: 12.5px;\r\n  color: #585858;\r\n  line-height: 1.55;\r\n}\r\n.sgrc-nis2 .nis2-benefits {\r\n  list-style: none;\r\n  padding: 0;\r\n  margin: 0.75rem 0 1.5rem;\r\n  display: grid;\r\n  grid-template-columns: 1fr 1fr;\r\n  gap: 0.55rem;\r\n}\r\n.sgrc-nis2 .nis2-benefits li {\r\n  display: flex;\r\n  align-items: flex-start;\r\n  gap: 0.6rem;\r\n  font-size: 13.5px;\r\n  line-height: 1.55;\r\n}\r\n.sgrc-nis2 .nis2-benefits li::before {\r\n  content: \"\u2713\";\r\n  color: #175CFF;\r\n  font-weight: 700;\r\n  flex-shrink: 0;\r\n}\r\n.sgrc-nis2 .nis2-checklist {\r\n  list-style: none;\r\n  padding: 0;\r\n  margin: 0.75rem 0 1.5rem;\r\n  counter-reset: step;\r\n}\r\n.sgrc-nis2 .nis2-checklist li {\r\n  counter-increment: step;\r\n  display: flex;\r\n  align-items: flex-start;\r\n  gap: 0.85rem;\r\n  padding: 0.65rem 0.75rem;\r\n  border-bottom: 1px solid #D4DAE5;\r\n  font-size: 13.5px;\r\n  line-height: 1.6;\r\n}\r\n.sgrc-nis2 .nis2-checklist li:last-child { border-bottom: none; }\r\n.sgrc-nis2 .nis2-checklist li::before {\r\n  content: counter(step);\r\n  display: flex;\r\n  align-items: center;\r\n  justify-content: center;\r\n  min-width: 22px;\r\n  height: 22px;\r\n  background: #1A2E4C;\r\n  color: #fff;\r\n  font-size: 11px;\r\n  font-weight: 700;\r\n  border-radius: 50%;\r\n  flex-shrink: 0;\r\n  margin-top: 0.15rem;\r\n}\r\n.sgrc-nis2 .nis2-divider {\r\n  border: none;\r\n  border-top: 1px solid #D4DAE5;\r\n  margin: 2.5rem 0;\r\n}\r\n@media (max-width: 560px) {\r\n  .sgrc-nis2 .nis2-grid { grid-template-columns: 1fr; }\r\n  .sgrc-nis2 .nis2-benefits { grid-template-columns: 1fr; }\r\n  .sgrc-nis2 .nis2-stat-number { font-size: 28px; }\r\n}\r\n<\/style>\r\n\r\n<div class=\"sgrc-nis2\">\r\n\r\n<p>\r\n  La <a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX%3A32022L2555\" target=\"_blank\" rel=\"noopener\">directive NIS2<\/a> n'est pas un simple texte de conformit\u00e9. Elle transforme en profondeur la mani\u00e8re dont les organisations doivent aborder le risque num\u00e9rique, en d\u00e9pla\u00e7ant l'attention de la documentation vers la r\u00e9silience, la stabilit\u00e9 op\u00e9rationnelle et la responsabilit\u00e9 au niveau de la direction.\r\n<\/p>\r\n<p>\r\n  De nombreuses organisations sous-estiment pr\u00e9cis\u00e9ment cette distinction et s'exposent ainsi non seulement \u00e0 des cons\u00e9quences r\u00e9glementaires, mais aussi \u00e0 des interruptions d'activit\u00e9, \u00e0 une atteinte \u00e0 leur r\u00e9putation et \u00e0 une exposition financi\u00e8re significative. Pour une vue plus large des effets de cette \u00e9volution sur le travail quotidien de gouvernance, voir notre article <a href=\"https:\/\/swissgrc.com\/fr\/when-grc-stopped-being-periodic-and-became-everyday-work\/\">Quand la GRC a cess\u00e9 d'\u00eatre p\u00e9riodique pour devenir un travail de tous les jours<\/a>.\r\n<\/p>\r\n\r\n<h2>Pourquoi la comparaison avec le RGPD ne tient pas<\/h2>\r\n\r\n<p>Le RGPD a install\u00e9 dans de nombreuses organisations une m\u00e9thode \u00e9prouv\u00e9e, et cette logique est profond\u00e9ment ancr\u00e9e&nbsp;:<\/p>\r\n\r\n<table class=\"nis2-table\">\r\n  <thead>\r\n    <tr>\r\n      <th>Crit\u00e8re<\/th>\r\n      <th>Approche RGPD<\/th>\r\n      <th>Exigence NIS2<\/th>\r\n    <\/tr>\r\n  <\/thead>\r\n  <tbody>\r\n    <tr>\r\n      <td>Orientation<\/td>\r\n      <td class=\"col-gdpr\">Documentation et preuves<\/td>\r\n      <td class=\"col-nis2\">Efficacit\u00e9 et r\u00e9silience<\/td>\r\n    <\/tr>\r\n    <tr>\r\n      <td>Objectif<\/td>\r\n      <td class=\"col-gdpr\">R\u00e9ussir l'audit<\/td>\r\n      <td class=\"col-nis2\">Rester op\u00e9rationnel sous attaque<\/td>\r\n    <\/tr>\r\n    <tr>\r\n      <td>Responsabilit\u00e9<\/td>\r\n      <td class=\"col-gdpr\">D\u00e9l\u00e9gu\u00e9 \u00e0 la protection des donn\u00e9es<\/td>\r\n      <td class=\"col-nis2\">Directement la direction g\u00e9n\u00e9rale<\/td>\r\n    <\/tr>\r\n    <tr>\r\n      <td>Nature<\/td>\r\n      <td class=\"col-gdpr\">Documentation statique<\/td>\r\n      <td class=\"col-nis2\">Gestion dynamique des risques<\/td>\r\n    <\/tr>\r\n    <tr>\r\n      <td>R\u00e9action<\/td>\r\n      <td class=\"col-gdpr\">R\u00e9pondre aux demandes<\/td>\r\n      <td class=\"col-nis2\">D\u00e9clarer et g\u00e9rer activement les incidents<\/td>\r\n    <\/tr>\r\n  <\/tbody>\r\n<\/table>\r\n\r\n<div class=\"nis2-highlight\">\r\n  L'attention se d\u00e9place de la \u00ab&nbsp;conformit\u00e9&nbsp;\u00bb vers la \u00ab&nbsp;cyber-r\u00e9silience&nbsp;\u00bb, et il ne s'agit pas d'une \u00e9volution progressive, mais d'un changement de cap fondamental.\r\n<\/div>\r\n\r\n<h2>NIS2 fait de la cybers\u00e9curit\u00e9 une responsabilit\u00e9 de la direction<\/h2>\r\n\r\n<p>\r\n  L'une des \u00e9volutions les plus significatives introduites par NIS2 concerne le niveau ex\u00e9cutif. La cybers\u00e9curit\u00e9 ne peut plus \u00eatre trait\u00e9e comme la seule responsabilit\u00e9 du d\u00e9partement informatique. Selon les <a href=\"https:\/\/www.bsi.bund.de\/EN\/Themen\/Unternehmen-und-Organisationen\/Informationen-und-Empfehlungen\/Empfehlungen-nach-Angriffszielen\/NIS2\/NIS2_node.html\" target=\"_blank\" rel=\"noopener\">orientations du BSI sur la mise en \u0153uvre de NIS2<\/a>, la direction g\u00e9n\u00e9rale doit approuver les mesures de s\u00e9curit\u00e9, superviser leur ex\u00e9cution et \u00eatre r\u00e9guli\u00e8rement inform\u00e9e du niveau de s\u00e9curit\u00e9 de l'organisation.\r\n<\/p>\r\n<p>Cela remod\u00e8le en profondeur les <a href=\"https:\/\/swissgrc.com\/fr\/risk-management-software\/\">structures de gouvernance<\/a> de nombreuses organisations&nbsp;:<\/p>\r\n\r\n<div class=\"nis2-grid\">\r\n  <div class=\"nis2-cell\">\r\n    <strong>Gouvernance d'entreprise<\/strong>\r\n    <span>Les cyber-risques int\u00e8grent l'agenda strat\u00e9gique de la direction<\/span>\r\n  <\/div>\r\n  <div class=\"nis2-cell\">\r\n    <strong>Port\u00e9e strat\u00e9gique<\/strong>\r\n    <span>Les d\u00e9cisions de s\u00e9curit\u00e9 remontent au conseil d'administration<\/span>\r\n  <\/div>\r\n  <div class=\"nis2-cell\">\r\n    <strong>Responsabilit\u00e9 personnelle<\/strong>\r\n    <span>L'exposition juridique des dirigeants passe nettement au premier plan<\/span>\r\n  <\/div>\r\n  <div class=\"nis2-cell\">\r\n    <strong>Budget et priorit\u00e9s<\/strong>\r\n    <span>Les investissements de s\u00e9curit\u00e9 sont r\u00e9\u00e9valu\u00e9s et reprioris\u00e9s<\/span>\r\n  <\/div>\r\n  <div class=\"nis2-cell\" style=\"grid-column: 1 \/ -1;\">\r\n    <strong>La r\u00e9silience comme avantage concurrentiel<\/strong>\r\n    <span>La solidit\u00e9 cyber devient un facteur de diff\u00e9renciation mesurable sur le march\u00e9<\/span>\r\n  <\/div>\r\n<\/div>\r\n\r\n<p>La cybers\u00e9curit\u00e9 passe du statut de discipline technique \u00e0 celui d'enjeu de bonne gouvernance d'entreprise.<\/p>\r\n\r\n<h2>Les entreprises de taille interm\u00e9diaire sont particuli\u00e8rement sous pression<\/h2>\r\n\r\n<p>De nombreuses organisations pensent encore que NIS2 ne s'applique qu'aux op\u00e9rateurs d'infrastructures critiques. La r\u00e9alit\u00e9 est bien plus large&nbsp;:<\/p>\r\n\r\n<div class=\"nis2-stat\">\r\n  <div class=\"nis2-stat-number\">30<span>&nbsp;000<\/span><\/div>\r\n  <div class=\"nis2-stat-label\">\r\n    <strong>entreprises rien qu'en Allemagne<\/strong> seraient concern\u00e9es par les nouvelles exigences NIS2, soit bien plus que ce qui \u00e9tait auparavant r\u00e9glement\u00e9 au titre de KRITIS.<br>\r\n    <a href=\"https:\/\/www.enisa.europa.eu\/topics\/cybersecurity-policy\/nis-directive-new\" target=\"_blank\" rel=\"noopener\">Source&nbsp;: ENISA \u2013 NIS2 Overview<\/a>\r\n  <\/div>\r\n<\/div>\r\n\r\n<p>Les organisations concern\u00e9es rel\u00e8vent de secteurs tr\u00e8s vari\u00e9s&nbsp;:<\/p>\r\n\r\n<div class=\"nis2-tags\">\r\n  <span class=\"nis2-tag\">Industrie et production<\/span>\r\n  <span class=\"nis2-tag\">Sant\u00e9<\/span>\r\n  <span class=\"nis2-tag\">Logistique et transport<\/span>\r\n  <span class=\"nis2-tag\">Services informatiques et cloud<\/span>\r\n  <span class=\"nis2-tag\">Industrie agroalimentaire<\/span>\r\n  <span class=\"nis2-tag\">Approvisionnement en \u00e9nergie<\/span>\r\n  <span class=\"nis2-tag\">Services num\u00e9riques<\/span>\r\n<\/div>\r\n\r\n<div class=\"nis2-infobox\">\r\n  <div class=\"nis2-infobox-title\">L'effet cha\u00eene d'approvisionnement<\/div>\r\n  M\u00eame les organisations qui ne sont pas directement r\u00e9glement\u00e9es subissent une pression croissante, car leurs clients, partenaires et donneurs d'ordre exigent des normes de s\u00e9curit\u00e9 plus \u00e9lev\u00e9es. NIS2 impose explicitement la <a href=\"https:\/\/swissgrc.com\/fr\/tprm-software\/\">gestion des risques li\u00e9s \u00e0 la cha\u00eene d'approvisionnement<\/a>, ce qui \u00e9tend sa port\u00e9e bien au-del\u00e0 des entit\u00e9s directement r\u00e9glement\u00e9es. Pour aller plus loin&nbsp;: <a href=\"https:\/\/swissgrc.com\/fr\/when-risk-enters-through-the-front-door-rethinking-vendor-risk-management\/\">Repenser la gestion des risques fournisseurs \u2192<\/a>\r\n<\/div>\r\n\r\n<h2>Le v\u00e9ritable probl\u00e8me&nbsp;: le manque de visibilit\u00e9<\/h2>\r\n\r\n<p>Dans de nombreuses organisations, l'infrastructure informatique s'est d\u00e9velopp\u00e9e de mani\u00e8re organique au fil des ann\u00e9es. Solutions cloud, prestataires externes, mod\u00e8les de travail hybrides et environnements syst\u00e8mes complexes cr\u00e9ent de nouvelles d\u00e9pendances, alors qu'une vue d'ensemble fait souvent d\u00e9faut sur les points suivants&nbsp;:<\/p>\r\n\r\n<ul class=\"nis2-list\">\r\n  <li>Quels syst\u00e8mes sont critiques pour l'activit\u00e9&nbsp;?<\/li>\r\n  <li>O\u00f9 se situent les risques et les vuln\u00e9rabilit\u00e9s les plus importants&nbsp;?<\/li>\r\n  <li>Qui est responsable de quoi&nbsp;?<\/li>\r\n  <li>Quels tiers ont acc\u00e8s aux donn\u00e9es sensibles&nbsp;?<\/li>\r\n  <li>Que se passe-t-il en cas d'urgence, et qui pilote la r\u00e9ponse&nbsp;?<\/li>\r\n<\/ul>\r\n\r\n<div class=\"nis2-highlight\">\r\n  C'est pr\u00e9cis\u00e9ment l\u00e0 que NIS2 intervient. La directive exige une transformation organisationnelle, et non le simple ajout de mesures de s\u00e9curit\u00e9 isol\u00e9es.\r\n<\/div>\r\n\r\n<p>\r\n  Concr\u00e8tement, la directive impose une <a href=\"https:\/\/swissgrc.com\/fr\/risk-management-software\/\">gestion des risques<\/a> structur\u00e9e, des processus de d\u00e9claration des incidents, des capacit\u00e9s de r\u00e9ponse aux incidents, une planification de la continuit\u00e9 d'activit\u00e9 et la prise en compte des risques li\u00e9s \u00e0 la cha\u00eene d'approvisionnement. Le <a href=\"https:\/\/www.bsi.bund.de\/EN\/Themen\/Unternehmen-und-Organisationen\/Informationen-und-Empfehlungen\/Empfehlungen-nach-Angriffszielen\/NIS2\/NIS2_node.html\" target=\"_blank\" rel=\"noopener\">BSI fournit des orientations concr\u00e8tes de mise en \u0153uvre<\/a> pour accompagner les organisations dans cette d\u00e9marche.\r\n<\/p>\r\n\r\n<hr class=\"nis2-divider\" \/>\r\n\r\n<h2>Pourquoi les tableurs et les outils cloisonn\u00e9s ne suffisent pas<\/h2>\r\n\r\n<p>De nombreuses organisations tentent encore de traiter NIS2 \u00e0 l'aide de tableurs, de dossiers partag\u00e9s et d'outils isol\u00e9s. Le probl\u00e8me de fond de cette approche&nbsp;:<\/p>\r\n\r\n<div class=\"nis2-infobox\">\r\n  <div class=\"nis2-infobox-title\">Le probl\u00e8me de fond<\/div>\r\n  La cyber-r\u00e9silience est <strong>dynamique<\/strong>. Les risques \u00e9voluent en permanence. Les fournisseurs changent. Des vuln\u00e9rabilit\u00e9s apparaissent chaque jour. Les obligations de d\u00e9claration exigent rapidit\u00e9 et transparence, deux qualit\u00e9s qu'une documentation statique ne peut offrir.\r\n<\/div>\r\n\r\n<p>Les organisations ont besoin de <a href=\"https:\/\/swissgrc.com\/fr\/solutions\/\">structures int\u00e9gr\u00e9es de gouvernance, risques et conformit\u00e9<\/a> qui r\u00e9unissent en un m\u00eame endroit les risques, les mesures, les contr\u00f4les, les processus et les responsabilit\u00e9s. C'est \u00e0 cette seule condition qu'il devient possible de&nbsp;:<\/p>\r\n\r\n<ul class=\"nis2-list\">\r\n  <li>Hi\u00e9rarchiser et piloter les risques en continu<\/li>\r\n  <li>Mettre en \u0153uvre et suivre efficacement les mesures<\/li>\r\n  <li>Produire des preuves \u00e0 tout moment et de fa\u00e7on compl\u00e8te<\/li>\r\n  <li>G\u00e9rer les incidents efficacement et dans les d\u00e9lais requis<\/li>\r\n  <li>Satisfaire durablement aux exigences r\u00e9glementaires<\/li>\r\n<\/ul>\r\n\r\n<h2>NIS2 change la fa\u00e7on dont les organisations envisagent la cybers\u00e9curit\u00e9<\/h2>\r\n\r\n<p>\r\n  Le point le plus important est peut-\u00eatre syst\u00e9matiquement n\u00e9glig\u00e9 dans le d\u00e9bat&nbsp;: <strong>NIS2 n'est pas une simple charge r\u00e9glementaire.<\/strong> La directive contraint les organisations \u00e0 porter un regard structur\u00e9 et honn\u00eate sur leur r\u00e9silience num\u00e9rique, et c'est pr\u00e9cis\u00e9ment l\u00e0 que r\u00e9side, \u00e0 long terme, l'avantage strat\u00e9gique.\r\n<\/p>\r\n\r\n<p>Les organisations dot\u00e9es d'une forte cyber-r\u00e9silience en tirent les b\u00e9n\u00e9fices suivants&nbsp;:<\/p>\r\n\r\n<ul class=\"nis2-benefits\">\r\n  <li>Des op\u00e9rations plus stables<\/li>\r\n  <li>Un risque d'interruption r\u00e9duit<\/li>\r\n  <li>Une confiance accrue des clients et des partenaires<\/li>\r\n  <li>Une meilleure assurabilit\u00e9<\/li>\r\n  <li>Un positionnement concurrentiel plus solide<\/li>\r\n  <li>Une plus grande s\u00e9curit\u00e9 r\u00e9glementaire<\/li>\r\n<\/ul>\r\n\r\n<p>\r\n  Selon l'<a href=\"https:\/\/www.enisa.europa.eu\/publications\/enisa-threat-landscape-2024\" target=\"_blank\" rel=\"noopener\">ENISA Threat Landscape 2024<\/a>, la fr\u00e9quence et la sophistication des cyberattaques visant les organisations europ\u00e9ennes continuent d'augmenter. La cybers\u00e9curit\u00e9 devient un facteur de plus en plus d\u00e9terminant pour la valeur de l'entreprise \u00e0 long terme et pour sa p\u00e9rennit\u00e9.\r\n<\/p>\r\n\r\n<hr class=\"nis2-divider\" \/>\r\n\r\n<h2>Le moment d'agir, c'est maintenant<\/h2>\r\n\r\n<p>\r\n  De nombreuses organisations attendent encore une clart\u00e9 compl\u00e8te sur les lois de transposition nationales ou des orientations r\u00e9glementaires pr\u00e9cises. C'est une posture risqu\u00e9e&nbsp;: le paysage des menaces \u00e9volue plus vite que les processus r\u00e9glementaires, et les attentes des clients, des partenaires, des assureurs et des autorit\u00e9s de supervision ne cessent de cro\u00eetre.\r\n<\/p>\r\n\r\n<p>Plut\u00f4t que d'attendre que la pression r\u00e9glementaire les oblige \u00e0 agir, les organisations devraient prendre l'initiative. Un point de d\u00e9part concret&nbsp;: le <a href=\"https:\/\/nis2compliant.app\">NIS2 Readiness Check<\/a>, qui montre en quelques minutes o\u00f9 se situe votre organisation. Vous pouvez aussi \u00e9changer directement avec nos experts lors d'un <a href=\"https:\/\/swissgrc.com\/fr\/discoverycall\/\">Discovery Call<\/a>&nbsp;:<\/p>\r\n\r\n<ol class=\"nis2-checklist\">\r\n  <li>\u00c9valuer l'applicabilit\u00e9&nbsp;: \u00eates-vous concern\u00e9 directement ou indirectement&nbsp;?<\/li>\r\n  <li>D\u00e9finir les structures de gouvernance&nbsp;: qui porte la responsabilit\u00e9 en interne&nbsp;?<\/li>\r\n  <li>\u00c9valuer les risques de fa\u00e7on syst\u00e9matique&nbsp;: o\u00f9 se situent les lacunes critiques&nbsp;?<\/li>\r\n  <li>\u00c9tablir les processus&nbsp;: canaux de d\u00e9claration, r\u00e9ponse aux incidents, BCM<\/li>\r\n  <li>Clarifier les responsabilit\u00e9s, jusqu'\u00e0 la direction g\u00e9n\u00e9rale incluse<\/li>\r\n  <li>Ancrer la r\u00e9silience dans la strat\u00e9gie, comme objectif organisationnel permanent<\/li>\r\n<\/ol>\r\n\r\n<div class=\"nis2-highlight\">\r\n  Car au fond, NIS2 ne concerne pas seulement la conformit\u00e9. Il s'agit de la capacit\u00e9 d'une organisation \u00e0 rester op\u00e9rationnelle, m\u00eame sous attaque num\u00e9rique active.\r\n<\/div>\r\n\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Lorsqu&rsquo;il est question de NIS2 aujourd&rsquo;hui, une comparaison revient sans cesse :<br \/>\n\u00ab Ce sera le RGPD de la cybers\u00e9curit\u00e9. \u00bb Le rapprochement para\u00eet logique, mais il est trompeur et engage de nombreuses organisations sur une mauvaise voie. NIS2 n&rsquo;est pas simplement une r\u00e9glementation de conformit\u00e9 suppl\u00e9mentaire. La directive change en profondeur la mani\u00e8re dont les organisations doivent g\u00e9rer le risque num\u00e9rique.<\/p>\n","protected":false},"author":8,"featured_media":70887,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"_eb_attr":"","_swissgrc_real_author":"Yahya Mohamed Mao","real_author_title":"Chief Marketing Officer","real_author_bio":"Yahya Mohamed Mao is Chief Marketing Officer and Member of the Executive Board at Swiss GRC. In this role, he drives the company's global marketing and communications strategy, shaping brand positioning and market expansion across key regions.","real_author_photo":54996,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[30],"tags":[],"class_list":["post-70886","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-industry-news"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"NIS2 transforme la gouvernance, les responsabilit\u00e9s et la cyber-r\u00e9silience. Pourquoi les entreprises doivent agir de mani\u00e8re strat\u00e9gique, et pas seulement technique.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yahya Mohamed Mao\"\/>\n\t<meta name=\"google-site-verification\" content=\"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Swiss GRC (FR) | Governance, Risk &amp; Compliance (GRC)\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"NIS2 n&#039;est pas un projet informatique : la r\u00e9silience en jeu\" \/>\n\t\t<meta property=\"og:description\" content=\"NIS2 transforme la gouvernance, les responsabilit\u00e9s et la cyber-r\u00e9silience. Pourquoi les entreprises doivent agir de mani\u00e8re strat\u00e9gique, et pas seulement technique.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/swissgrc.com\/fr\/wp-content\/uploads\/sites\/3\/2026\/05\/NIS2-Is-Not-an-IT-Project-1.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/swissgrc.com\/fr\/wp-content\/uploads\/sites\/3\/2026\/05\/NIS2-Is-Not-an-IT-Project-1.png\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1279\" \/>\n\t\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-05-06T15:30:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-09-17T13:00:14+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@SwissGRC\" \/>\n\t\t<meta name=\"twitter:title\" content=\"NIS2 n&#039;est pas un projet informatique : la r\u00e9silience en jeu\" \/>\n\t\t<meta name=\"twitter:description\" content=\"NIS2 transforme la gouvernance, les responsabilit\u00e9s et la cyber-r\u00e9silience. Pourquoi les entreprises doivent agir de mani\u00e8re strat\u00e9gique, et pas seulement technique.\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@yibnm\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/swissgrc.com\/fr\/wp-content\/uploads\/sites\/3\/2026\/05\/NIS2-Is-Not-an-IT-Project-1.png\" \/>\n\t\t<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t\t<meta name=\"twitter:data1\" content=\"Yahya Mohamed Mao\" \/>\n\t\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\\\/#blogposting\",\"name\":\"NIS2 n'est pas un projet informatique : la r\\u00e9silience en jeu\",\"headline\":\"NIS2 n&rsquo;est pas un projet informatique : pourquoi les entreprises doivent repenser leur cybers\\u00e9curit\\u00e9\",\"author\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/author\\\/yahyaen\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2026\\\/05\\\/NIS2-Is-Not-an-IT-Project-1.png\",\"width\":1279,\"height\":720,\"caption\":\"NIS2 n'est pas un projet informatique : pourquoi la r\\u00e9silience compte\"},\"datePublished\":\"2026-05-06T17:30:09+02:00\",\"dateModified\":\"2026-09-17T15:00:14+02:00\",\"inLanguage\":\"fr-FR\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\\\/#webpage\"},\"articleSection\":\"Industry News\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/category\\\/industry-news\\\/#listItem\",\"name\":\"Industry News\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/category\\\/industry-news\\\/#listItem\",\"position\":2,\"name\":\"Industry News\",\"item\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/category\\\/industry-news\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\\\/#listItem\",\"name\":\"NIS2 n&rsquo;est pas un projet informatique : pourquoi les entreprises doivent repenser leur cybers\\u00e9curit\\u00e9\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\\\/#listItem\",\"position\":3,\"name\":\"NIS2 n&rsquo;est pas un projet informatique : pourquoi les entreprises doivent repenser leur cybers\\u00e9curit\\u00e9\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/category\\\/industry-news\\\/#listItem\",\"name\":\"Industry News\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/#organization\",\"name\":\"Swiss GRC AG\",\"description\":\"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/\",\"telephone\":\"+41412207500\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/06\\\/Logo_V1_Original_mit_Claim.png\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.twitter.com\\\/SwissGRC\",\"https:\\\/\\\/www.instagram.com\\\/swissgrc\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCy4QuXYekCQrA4n5oEwJSJg\",\"https:\\\/\\\/ch.linkedin.com\\\/company\\\/swissgrc\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/author\\\/yahyaen\\\/#author\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/author\\\/yahyaen\\\/\",\"name\":\"Yahya Mohamed Mao\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3bf99b34df7860c8d0a49d2d8c009068894348156d0a51ba297529d37fbb168d?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"Yahya Mohamed Mao\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/yibnm\",\"https:\\\/\\\/ch.linkedin.com\\\/in\\\/yahyamohamedmao\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\\\/#webpage\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\\\/\",\"name\":\"NIS2 n'est pas un projet informatique : la r\\u00e9silience en jeu\",\"description\":\"NIS2 transforme la gouvernance, les responsabilit\\u00e9s et la cyber-r\\u00e9silience. Pourquoi les entreprises doivent agir de mani\\u00e8re strat\\u00e9gique, et pas seulement technique.\",\"inLanguage\":\"fr-FR\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/author\\\/yahyaen\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/author\\\/yahyaen\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2026\\\/05\\\/NIS2-Is-Not-an-IT-Project-1.png\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\\\/#mainImage\",\"width\":1279,\"height\":720,\"caption\":\"NIS2 n'est pas un projet informatique : pourquoi la r\\u00e9silience compte\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\\\/#mainImage\"},\"datePublished\":\"2026-05-06T17:30:09+02:00\",\"dateModified\":\"2026-09-17T15:00:14+02:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/#website\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/\",\"name\":\"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM\",\"description\":\"Governance, Risk & Compliance (GRC)\",\"inLanguage\":\"fr-FR\",\"publisher\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/fr\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>NIS2 n'est pas un projet informatique : la r\u00e9silience en jeu<\/title>\n\n","aioseo_head_json":{"title":"NIS2 n'est pas un projet informatique : la r\u00e9silience en jeu","description":"NIS2 transforme la gouvernance, les responsabilit\u00e9s et la cyber-r\u00e9silience. Pourquoi les entreprises doivent agir de mani\u00e8re strat\u00e9gique, et pas seulement technique.","canonical_url":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/#blogposting","name":"NIS2 n'est pas un projet informatique : la r\u00e9silience en jeu","headline":"NIS2 n&rsquo;est pas un projet informatique : pourquoi les entreprises doivent repenser leur cybers\u00e9curit\u00e9","author":{"@id":"https:\/\/swissgrc.com\/fr\/author\/yahyaen\/#author"},"publisher":{"@id":"https:\/\/swissgrc.com\/fr\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/fr\/wp-content\/uploads\/sites\/3\/2026\/05\/NIS2-Is-Not-an-IT-Project-1.png","width":1279,"height":720,"caption":"NIS2 n'est pas un projet informatique : pourquoi la r\u00e9silience compte"},"datePublished":"2026-05-06T17:30:09+02:00","dateModified":"2026-09-17T15:00:14+02:00","inLanguage":"fr-FR","mainEntityOfPage":{"@id":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/#webpage"},"isPartOf":{"@id":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/#webpage"},"articleSection":"Industry News"},{"@type":"BreadcrumbList","@id":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/fr\/#listItem","position":1,"name":"Home","item":"https:\/\/swissgrc.com\/fr\/","nextItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/fr\/category\/industry-news\/#listItem","name":"Industry News"}},{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/fr\/category\/industry-news\/#listItem","position":2,"name":"Industry News","item":"https:\/\/swissgrc.com\/fr\/category\/industry-news\/","nextItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/#listItem","name":"NIS2 n&rsquo;est pas un projet informatique : pourquoi les entreprises doivent repenser leur cybers\u00e9curit\u00e9"},"previousItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/fr\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/#listItem","position":3,"name":"NIS2 n&rsquo;est pas un projet informatique : pourquoi les entreprises doivent repenser leur cybers\u00e9curit\u00e9","previousItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/fr\/category\/industry-news\/#listItem","name":"Industry News"}}]},{"@type":"Organization","@id":"https:\/\/swissgrc.com\/fr\/#organization","name":"Swiss GRC AG","description":"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.","url":"https:\/\/swissgrc.com\/fr\/","telephone":"+41412207500","logo":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2023\/06\/Logo_V1_Original_mit_Claim.png","@id":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/#organizationLogo"},"image":{"@id":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/#organizationLogo"},"sameAs":["https:\/\/www.twitter.com\/SwissGRC","https:\/\/www.instagram.com\/swissgrc\/","https:\/\/www.youtube.com\/channel\/UCy4QuXYekCQrA4n5oEwJSJg","https:\/\/ch.linkedin.com\/company\/swissgrc"]},{"@type":"Person","@id":"https:\/\/swissgrc.com\/fr\/author\/yahyaen\/#author","url":"https:\/\/swissgrc.com\/fr\/author\/yahyaen\/","name":"Yahya Mohamed Mao","image":{"@type":"ImageObject","@id":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/3bf99b34df7860c8d0a49d2d8c009068894348156d0a51ba297529d37fbb168d?s=96&d=mm&r=g","width":96,"height":96,"caption":"Yahya Mohamed Mao"},"sameAs":["https:\/\/twitter.com\/yibnm","https:\/\/ch.linkedin.com\/in\/yahyamohamedmao"]},{"@type":"WebPage","@id":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/#webpage","url":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/","name":"NIS2 n'est pas un projet informatique : la r\u00e9silience en jeu","description":"NIS2 transforme la gouvernance, les responsabilit\u00e9s et la cyber-r\u00e9silience. Pourquoi les entreprises doivent agir de mani\u00e8re strat\u00e9gique, et pas seulement technique.","inLanguage":"fr-FR","isPartOf":{"@id":"https:\/\/swissgrc.com\/fr\/#website"},"breadcrumb":{"@id":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/#breadcrumblist"},"author":{"@id":"https:\/\/swissgrc.com\/fr\/author\/yahyaen\/#author"},"creator":{"@id":"https:\/\/swissgrc.com\/fr\/author\/yahyaen\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/fr\/wp-content\/uploads\/sites\/3\/2026\/05\/NIS2-Is-Not-an-IT-Project-1.png","@id":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/#mainImage","width":1279,"height":720,"caption":"NIS2 n'est pas un projet informatique : pourquoi la r\u00e9silience compte"},"primaryImageOfPage":{"@id":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/#mainImage"},"datePublished":"2026-05-06T17:30:09+02:00","dateModified":"2026-09-17T15:00:14+02:00"},{"@type":"WebSite","@id":"https:\/\/swissgrc.com\/fr\/#website","url":"https:\/\/swissgrc.com\/fr\/","name":"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM","description":"Governance, Risk & Compliance (GRC)","inLanguage":"fr-FR","publisher":{"@id":"https:\/\/swissgrc.com\/fr\/#organization"}}]},"og:locale":"fr_FR","og:site_name":"Swiss GRC (FR) | Governance, Risk &amp; Compliance (GRC)","og:type":"article","og:title":"NIS2 n'est pas un projet informatique : la r\u00e9silience en jeu","og:description":"NIS2 transforme la gouvernance, les responsabilit\u00e9s et la cyber-r\u00e9silience. Pourquoi les entreprises doivent agir de mani\u00e8re strat\u00e9gique, et pas seulement technique.","og:url":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/","og:image":"https:\/\/swissgrc.com\/fr\/wp-content\/uploads\/sites\/3\/2026\/05\/NIS2-Is-Not-an-IT-Project-1.png","og:image:secure_url":"https:\/\/swissgrc.com\/fr\/wp-content\/uploads\/sites\/3\/2026\/05\/NIS2-Is-Not-an-IT-Project-1.png","og:image:width":1279,"og:image:height":720,"article:published_time":"2026-05-06T15:30:09+00:00","article:modified_time":"2026-09-17T13:00:14+00:00","twitter:card":"summary_large_image","twitter:site":"@SwissGRC","twitter:title":"NIS2 n'est pas un projet informatique : la r\u00e9silience en jeu","twitter:description":"NIS2 transforme la gouvernance, les responsabilit\u00e9s et la cyber-r\u00e9silience. Pourquoi les entreprises doivent agir de mani\u00e8re strat\u00e9gique, et pas seulement technique.","twitter:creator":"@yibnm","twitter:image":"https:\/\/swissgrc.com\/fr\/wp-content\/uploads\/sites\/3\/2026\/05\/NIS2-Is-Not-an-IT-Project-1.png","twitter:label1":"Written by","twitter:data1":"Yahya Mohamed Mao","twitter:label2":"Est. reading time","twitter:data2":"7 minutes"},"aioseo_meta_data":{"post_id":"70886","title":"NIS2 n'est pas un projet informatique : la r\u00e9silience en jeu","description":"NIS2 transforme la gouvernance, les responsabilit\u00e9s et la cyber-r\u00e9silience. Pourquoi les entreprises doivent agir de mani\u00e8re strat\u00e9gique, et pas seulement technique.","keywords":null,"keyphrases":{"focus":{"keyphrase":"NIS2","score":88},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":true,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"seo_analyzer_scan_date":"2026-09-17 13:01:06","breadcrumb_settings":null,"limit_modified_date":false,"open_ai":null,"ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":{"subject":"","preview":"","content":""},"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2026-09-17 09:56:31","updated":"2026-09-17 13:25:30","focus_keyword":"NIS2","additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/swissgrc.com\/fr\/\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/swissgrc.com\/fr\/category\/industry-news\/\" title=\"Industry News\">Industry News<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\tNIS2 n\u2019est pas un projet informatique : pourquoi les entreprises doivent repenser leur cybers\u00e9curit\u00e9\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/swissgrc.com\/fr\/"},{"label":"Industry News","link":"https:\/\/swissgrc.com\/fr\/category\/industry-news\/"},{"label":"NIS2 n&rsquo;est pas un projet informatique : pourquoi les entreprises doivent repenser leur cybers\u00e9curit\u00e9","link":"https:\/\/swissgrc.com\/fr\/nis2-pas-projet-informatique-repenser-cybersecurite__trashed\/"}],"_links":{"self":[{"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/posts\/70886","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/comments?post=70886"}],"version-history":[{"count":1,"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/posts\/70886\/revisions"}],"predecessor-version":[{"id":70893,"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/posts\/70886\/revisions\/70893"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/media\/70887"}],"wp:attachment":[{"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/media?parent=70886"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/categories?post=70886"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/swissgrc.com\/fr\/wp-json\/wp\/v2\/tags?post=70886"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}