Missed return for cyberscore

Delay in switching on for the cyberscore. As noted by the Digital Factory, the application texts framing the implementation of the cyberscore have still not been published in the Official Journal. Which is annoying to say the least, since cyberscore is supposed to have become mandatory on October 1, 2023.

Promulgated in March 2022, the law on cyberscore aims to propose, as for the nutriscore of the agri-food industry, a colorful indicator to indicate the level of data security ranging from A to E. Pushed by Senator Laurent Lafon (UDI), this cyberscore must be based on an audit by a qualified service provider by the Anssi, allowing Internet users to know the level of security of their data on the sites and social networks used.

Draft texts

A good idea, even if this kind of initiative has a necessarily limited scope. And which is obviously not so easy to implement. There has indeed been, notes Fevad, a professional union bringing together e-commerce companies, a consultation conducted in spring 2023 by the Ministry of the Economy on the implementation of cyberscore. But since then, radio silence.

Bercy did publish the two draft texts (decree and decree), which were however not followed by a formal publication in the Official Journal. The French administration was obviously aware of the delay taken. The draft decree thus provides for the entry into force of cyberscore on January 1, 2024.

Up to 15 million unique visitors

This text also indicates that the audits must be carried out by information systems security audit providers (Passi) qualified by the Anssi. At the time, the public authorities expected an audit based solely on open information, “freely accessible and non-intrusively by the provider”.

They had also set the validity period of the cyberscore at 12 months.

As for the draft decree, it proposed to make it mandatory to set up a cyberscore for sites with more than 25 million unique visitors from French territory per month in 2024, before lowering this gauge to 15 million unique visitors thereafter.