LABEL PROTEUS CYBERSECURITY

Aims of the Label

Four fundamental pillars for excellent cybersecurity

✅

Regulatory Compliance

Ensure compliance with the regulations and standards in force in the field of cybersecurity and data protection.

🎯

Best Practices

Promote the adoption of IT security best practices by organisations of all sizes.

🤝

Strengthened Trust

Strengthen the trust of customers, partners and users in Proteus-certified organisations.

📈

Continuous Improvement

Contribute to the continuous improvement of cybersecurity-related processes and skills.

Eligibility Criteria & Requirements

Three standards-based pillars for full certification

🏢 Information Security Management System (ISMS)

Implementation of an ISMS compliant with the ISO/IEC 27001:2013 standard
Complete documentation of security processes
Definition of roles and responsibilities

⚠️ Risk Management

Systematic identification of security-related risks
Risk assessment and classification
Appropriate risk treatment plan

🔧 Protection Measures

Definition of measures suited to the risks identified
Implementation of security controls
Monitoring, review and continuous improvement of the ISMS

🎯 Security and Risk Management

Risk identification and assessment
Information security governance
Legal and regulatory compliance
Security policies and procedures

🏗️ Architecture and Engineering

Secure system design
Access models and controls
Cryptography technologies
Infrastructure security

🌐 Communication and Network Security

Protection of networks and communications
Network security protocols
Intrusion prevention and detection
Anomaly analysis

👤 Identity and Access Management

Multi-factor authentication
Account and privilege management
Access control to resources
Access monitoring

🔍 Security Assessment and Testing

Regular security audits
Penetration testing
Vulnerability testing
Incident analysis

⚙️ Security Operations

Continuous system monitoring
Security incident management
Business continuity plan
Disaster recovery

💻 Secure Development

Secure development principles
Application lifecycle management
Database security
Application security testing

🗄️ Asset Security

Data classification
Access rights management
Privacy protection
Asset lifecycle management

👨‍💼 Data Protection Officer (DPO)

Appointment of a DPO where necessary
Clear definition of duties and responsibilities
Ongoing DPO training
Coordination with supervisory authorities

📊 GDPR Compliance

Personal data collection process
Secure processing and storage
Data deletion procedures
Management of data subjects' rights

🔒 Data Protection

Appropriate technical measures (encryption, pseudonymisation)
Organisational measures (policies, procedures)
Privacy by Design and Privacy by Default
Data Protection Impact Assessment (DPIA)

🎓 Training and Awareness

Staff training on GDPR requirements
Ongoing data protection awareness
Documentation of good practices
Regular knowledge updates

Certification Process

A structured journey in 4 key steps

📝 Application

Submission of a file detailing your compliance with the criteria and requirements of the Proteus label. Complete documentation of your security and data protection processes.

🔍 Assessment Audit

A team of cybersecurity experts assesses your compliance and verifies the information provided. In-depth audit of your systems, processes and documentation.

✅ Certification

If your organisation meets the requirements, you receive a certification valid for 3 years. Random follow-up audits check that compliance is maintained.

🔄 Renewal

Six months before expiry, submission of a renewal file. A new audit validates the certification for a further 3 years.