Competency 04 · of 05
Administering a secure information system
Level 2 (BUT2) — “Raising awareness of an information system's vulnerabilities and of possible remediations”
Why — securing an information system has become critical: applying good practice (ANSSI, the French national cybersecurity agency) and standards (ISO 27001, GDPR).
What — deploy defence in depth: firewalls, VPN, VLAN segmentation, OS hardening, cryptography.
Where / When — SAÉ 4.01 “Securing an information system” (infrastructure on Proxmox), semester 4, and building up skills in offensive security (pentesting, Root-Me).
- Striking the right balance between security requirements and usability constraints
- Complying with standards and the legal framework
- Integrating the latest technologies
- Working as a team
- Raising users' awareness effectively
- Analysing the existing setup and the security needs of a small organisation
- Evolving a company's information system and bringing it into compliance
A cybersecurity competency of the Cyber track, put into practice in SAÉ 4.01 “Securing an information system” (firewall, LDAP/LDAPS, VPN, PKI/TLS on Proxmox) and fed by my practice of offensive security (pentest methodology, Root-Me, TryHackMe).
- AC24.01 — Know and apply cybersecurity good practice and recommendations
- AC24.02 — Implement the fundamental tools for securing a network infrastructure
- AC24.03 — Secure services
- AC24.04 — Choose cryptographic tools suited to the information system's functional needs
- AC24.05 — Know the different types of attacks
- AC24.06 — Understand technical documents in English