Opportunity to participate in the congress of mayors, Cybermalveillance.gouv.fr published yesterday his third study on the maturité des collectivités en matière de cybersecurité. On le sait, ces dernières années, les mairies ont souvent été prises pour cible par des pirates.

Selon l’étude une collectivité sur dix declares that it has been the victim of one or more cyber attacks during the last 12 months. L’hameçonnage remains the main cause in 30% of cases. Arriving in the second place to download a virus, so that when consulting an infected site, all two à 12%. La faille de sécurité non corrigée took third place (10%, +5 points in one year). More 45% of the attacked collectivities do not know the cause of these attacks that have heavy consequences, including an interruption of activity and service (37%), a destruction or theft of data (24%) or a financial loss ( 10). %).

La consideration des risques remains limited

The consideration of risks remains limited, especially for small communities. An explanation that explains why they think they are vulnerable and leads them to overestimate the effectiveness of their level of protection and to insufficiently prepare for cyberattacks. 44% of collectivities estimate that they are weakly exposed to risks (+ 6p oints in a year) and 18% do not know how to assess them. A feeling of sous-exposition aux risques encore plus important pour une collectivité sur deux de moins de 300 habitants (49 %).

Cybermalveillance estimates that lack of budget, skills and support remain des freins to progress.

« Nous constatons that l’écart se creuse between les plus petites collectivités who think toujours qu’elles no poten bi des victimes potentiales et cells de plus de 1,000 habitants qui intensifient leurs efforts – Plus que jamais, il est donc nécessaire que le subject de la cybersecurité becomes l’affaire de tous, que les collectivités de toutes tailles continuent d’être sensibilisées afin qu’elles prennent les mesures nécessaires pour securiser in amont and se prepare to affronter une attaque”, declared Jérôme Notin, Director General of Cybermalveillance.gouv.fr