Polyodos — Guide utilisateur

English

Français

English

Français

Appearance

EBIOS Risk Manager ​

EBIOS RM is ANSSI's method for analysing and treating digital risk. It structures the analysis into 5 progressive workshops, from the overall context to the treatment plan. Workshops build on one another — don't move to the next one without completing the previous.

Workshop 1 — Scoping and security baseline ​

Defines what you're protecting (missions, business values, supporting assets) and what could go wrong (feared events), as well as the security measures already in place (security baseline).

See Workshop 1 — Scoping and the page details in Context, Scope and Feared Events.

Workshop 2 — Risk sources ​

Identifies who could threaten your organisation (risk sources) and what they're after (targeted objectives), as RS/OT pairs rated for relevance.

See Workshop 2 — Risk sources and the details in RS/OT pairs.

Workshop 3 — Strategic scenarios ​

Builds high-level attack paths, drawing on the organisation's ecosystem (suppliers, service providers, partners, customers) and their level of dependency/trust.

See Workshop 3 — Strategic scenarios, with details on Stakeholders and Strategic scenarios.

Workshop 4 — Operational scenarios ​

Translates strategic scenarios into technical attack chains on supporting assets, with a likelihood rating and automatic calculation of the risk level (Severity × Likelihood).

See Workshop 4 — Operational scenarios, with details on building scenarios and likelihood assessment.

Workshop 5 — Risk treatment ​

Plans the treatment measures (reduction, transfer, refusal, acceptance), details the action plan, and calculates residual risks after measures are applied.

See Workshop 5 — Risk treatment, with details on the treatment strategy, the action plan (PACD), and residual risks.

AI assistant ​

A configurable AI assistant is available on several pages (Strategic scenarios, Operational scenarios, Risk treatment) to speed up workshop production from the context already entered.

See ✦ AI Scoping.

Report ​

The final report (Word and Excel) is generated from the data of all 5 workshops.

See EBIOS RM Report.

Polyodos — Documentation utilisateur