doi:10.3166/R2IE.1.271-287 © 2009 Lavoisier SAS. Tous droits réservés
En matière de sécurité des systèmes d’information, normalisation
et standardisation
sont-ils des facteurs d’efficacité ?
³ Par Étienne de Séréville
,QJpQLHXU$500%$FRQVXOWDQW,%0FHUWLÀpHQVpFXULWpGHO·LQIRUPDWLRQ FKHIGXGpSDUWHPHQW6WUDWpJLHHW$UFKLWHFWXUH,7FKH],%0*OREDO7HFKQRORJ\6HUYLFHV HQ)UDQFH)RQGDWHXUHQGX&HUFOH)RUWLWXGH&OXEG·H[SHUWVIUDQoDLVHQ*XHUUH
HW'pIHQVHGHO·,QIRUPDWLRQHWGHOD&RQQDLVVDQFH
Résumé
La normalisation et la standardisation sont régulières et continues dans les technologies de l’information et de la communication et la sécurité afférente. Elles permettent l’interopérabilité des systèmes mais elles peuvent représenter des dangers pour leur sécurité. Par l’étude de normes et de standards de sécurité, tant dans les domaines organisationnel, méthodologique, technique que technologique, nous montrons que leur utilisation et application sans discernement n’est pas la meilleure stratégie pour atteindre le niveau de sécurité attendu. © 2009 Lavoisier SAS. Tous droits réservés
Mots clés : sécurité de l’information, normalisation, standardisation, technologies de l’information, efficacité de la sécurité
Abstract
In the field of information security, normalization and standardization are they factors of efficiency? Standardization and standardization are ongoing in the field of information technology and communications and for their related security. They enable interoperability of systems, but they can generate risks to their security. Through the study of norms and standards of security, both in the organizational, methodological, technical and technological scope, we show that their use and application indiscriminately is not the best strategy to reach the expected level of security. © 2009 Lavoisier SAS. All rights reserved
Keywords: information security, normalization, standardization, information technology, security, efficiency
Introduction
,O\DGHVIDLWVTXLPDUTXHQWOHXUpSRTXHFRPPHGHVDQQpHVFRPSWHQWSOXVTXHG·DXWUHV HVWGHFHOOHOjHOOHDHXOHSULYLOqJHGHFRPSWHUODSOXVLPSRUWDQWHIUDXGHGHO·KLV WRLUHGXFRXUWDJHÀQDQFLHUO·DIIDLUH.HUYLHOGHOD6RFLpWp*pQpUDOH©'XMDPDLVYXGDQV O·KLVWRLUHGHODÀQDQFHLQWHUQDWLRQDOHTXHOTXHPLOOLDUGVG·HXURVGHSHUWHVGXHVDX[
DJLVVHPHQWVG·XQFRXUWLHUª5DGLR)UDQFH,QWHUQDWLRQDOHMDQYLHU3RXU PLOOLDUGVG·HXURVGHSHUWHVOHFRXUWLHUHVWLQFXOSpOHMDQYLHUSRXU©IDX[HWXVDJH GHIDX[DEXVGHFRQÀDQFHHWLQWURGXFWLRQGDQVXQV\VWqPHGHWUDLWHPHQWDXWRPDWLVpGH GRQQpHVLQIRUPDWLTXHVª3RXUDXWDQWTXHO·DIIDLUHVRLWFRQQXHSXEOLTXHPHQWjFHMRXUpWDQW PDLQWHQDQWGDQVOHVPDLQVGHOD-XVWLFHODEDQTXHDGpMjIDLWXQHLQYHVWLJDWLRQDSSURIRQGLH GHVFRQGLWLRQVTXLRQWSHUPLVHVFHWWHIUDXGHH[FHSWLRQQHOOH/·©DEVHQFHGHFRQWU{OHVVXV FHSWLEOHVG·LGHQWLÀHUODIUDXGHª/·([SUHVVIpYULHUHW©ODKLpUDUFKLH«GpIDLOODQWH GDQVODVXSHUYLVLRQGHVHVDFWLYLWpVª/HVeFKRVPDLQHVRQWSDVVDQVODLVVHU TXHOTXHVLQWHUURJDWLRQVSRXUXQpWDEOLVVHPHQWHIUDQoDLVHPRQGLDODX[QRWDWLRQVOHV PHLOOHXUHVHWDX[FRQIRUPLWpVYDOLGpHVDXGHVVXVGHWRXVVRXSoRQV6DUEDQHV2[OH\%kOH ,62«6HUDLWFHHQFRUHXQ*ROLDWKWHUUDVVpSDUXQ'DYLGVLPSOHPHQWVXUQRPPp0LVWHU
$YHUDJH1HZ<RUN7LPHMDQYLHU"2XELHQHVWFHHQFRUHO·LOOXVLRQGHO·LQYXO QpUDELOLWp.HUYHUQTXLUHQGVRXUGHWDYHXJOH©/HUDSSRUW«SRLQWHHQSDUWLFXOLHU GHVRSpUDWLRQVVXUOHWLWUH$OOLDQ]jOD%RXUVHGH)UDQFIRUWHQª/·([SUHVVLG"/D TXHVWLRQOpJLWLPHTXHSHXWVHSRVHUXQREVHUYDWHXUH[WpULHXUTXHOTXHSHXDWWHQWLIjFHW\SH G·pYqQHPHQWH[FHSWLRQQHOFRQFHUQHO·HIÀFDFLWpUpHOOHHWDYpUpHGHVPR\HQVGHVpFXULWp GHOHXUPLVHHQ±XYUHGHOHXUFRQWU{OHHWGHVpWXGHVOHVD\DQWSUpFRQLVpHVRXELHQGHV UpIpUHQWLHOVXWLOLVpV(WORUVTXHFHVPR\HQVGHWRXVRUGUHVHWQDWXUHWDQWRUJDQLVDWLRQQHOV PpWKRGRORJLTXHVWHFKQLTXHVTXHWHFKQRORJLTXHVV·DSSXLHQWVXUGHVQRUPHVHWGHVVWDQGDUGV UHFRQQXVYDOLGpVHWODUJHPHQWGLIIXVpVQRXVSRXYRQVHQFRUHQRXVLQWHUURJHUOpJLWLPHPHQW jSURSRVGHOHXUUHFRQQDLVVDQFHHWGHOHXUPRGHGHYDOLGDWLRQ$LQVLQRXVSHUPHWWDQWGH SUHQGUHOHU{OHGHO·REVHUYDWHXULQFUpGXOHQRWUHTXHVWLRQQHPHQWVHUDOHVXLYDQWODQRUPD OLVDWLRQHWODVWDQGDUGLVDWLRQUpJXOLqUHHWFRQWLQXHWDQWRUJDQLVDWLRQQHOOHPpWKRGRORJLTXH WHFKQLTXHTXHWHFKQRORJLTXHVRQWLOVGHVIDFWHXUVG·HIÀFDFLWpHQPDWLqUHGH6pFXULWpGHV 6\VWqPHVG·,QIRUPDWLRQ66,SRXUDVVXUHUODFRQÀGHQWLDOLWpO·DXWKHQWLFLWpODGLVSRQLELOLWp O·LQWpJULWpGHVGRQQpHVODVLJQDWXUHpOHFWURQLTXHHWODÀDELOLWpGHVV\VWqPHV"$SUqVXQH PLVHHQSHUVSHFWLYHGHQRWUHVXMHWHWGHVUHFKHUFKHVHQPDWLqUHG·LQIRUPDWLRQHWGHVpFXULWp GHV6\VWqPHVG·,QIRUPDWLRQ6,LOVHUDSUpVHQWpOHVRUJDQLVPHVGHQRUPDOLVDWLRQHWGH VWDQGDUGLVDWLRQDLQVLTXHOHXUGpPDUFKH3XLVQRXVpWXGLHURQVSDUGHVFDVOHVLPSDFWVHQ WHUPHG·HIÀFDFLWpTXHFHVSURFHVVXVLQGXLVHQWVXUOD66,GDQVFKDFXQGHVGRPDLQHVWHFK QLTXHWHFKQRORJLTXHPpWKRGRORJLTXHHWRUJDQLVDWLRQQHO&HFLQRXVSHUPHWWUDGHGpGXLUH GHVSULQFLSHVjO·XVDJHGHVDFWHXUVGHOD66,WDQWWKpRULFLHQVTXHSUDWLFLHQV
1. Mise en perspective et recherches en matière d’information et de sécurité des SI
/DIUDXGHSUpFLWpHHVWV\PSWRPDWLTXHGHQRWUHpSRTXHGLWHGHO·qUHQXPpULTXH7RIÁHU VXFFpGDQWDX[qUHVDJULFROHHWLQGXVWULHOOH(OOHLOOXVWUHSDUFHWH[HPSOHHPEOp PDWLTXHO·LPSDFWÀQDQFLHUTX·DSXDYRLUO·©LQWURGXFWLRQGDQVXQV\VWqPHGHWUDLWHPHQW
DXWRPDWLVpªGDQVXQFRQWH[WHEDQFDLUHG·DXMRXUG·KXL/DGpSHQGDQFHDX[V\VWqPHVVWRFNDQW WUDLWDQWHWYpKLFXODQWOHVGRQQpHVGHVLQIRUPDWLRQVHVWSULPRUGLDOHG·RO·LPSRUWDQFHGH OHXUPDLWULVH'DYHQSRUWHW3UXVDN'HPrPHOHEHVRLQHQLQIRUPDWLRQVGDQVXQH pFRQRPLHJOREDOLVpHHWPRQGLDOLVpHHVWYLWDOSRXUVXUYLYUHGDQVOHVDIIURQWHPHQWVpFRQR PLTXHV)UDQFRLVG·DXMRXUG·KXL/·LQIRUPDWLRQHVWUHFRQQXHFRPPHXQHUHVVRXUFH FULWLTXH%DXPDUGHWOHVFRQFHSWVGH©JXHUUHGHO·LQIRUPDWLRQª/LELFNL 3LFKRW'XFORVGH©JXHUUHFRJQLWLYHªRXG·©LQIRGRPLQDQFHJOREDOHª+DUEXORW /XFDV+X\JXHVVHVRQWGpYHORSSpV$XMRXUG·KXLOHVFRXUDQWVGHUHFKHUFKHVRQW QRPEUHX[TXLWHQWHQWGHFRPSUHQGUHVDLVLUOHVLPSDFWVPRGpOLVHUVpFXULVHUO·LQIRUPDWLRQ HWXQGHVHVVXSSRUWVHWYpKLFXOHVSDUWLFXOLqUHPHQWUDSLGHVWHQWDFXODLUHVHWGLVVpPLQpVTXH VRQWOHVV\VWqPHVG·LQIRUPDWLRQHWGHFRPPXQLFDWLRQDVVRFLpV
/HVSUHPLqUHVUHFKHUFKHVHWGpYHORSSHPHQWVWKpRULTXHVVXUOHFRQFHSWG·,QIRUPDWLRQ VRQWOD7KpRULHGHO·,QIRUPDWLRQTXLVHGLYLVHHQGHX[FKDPSVPDWKpPDWLTXHHWSV\FKR ORJLH'DQVOHFKDPSPDWKpPDWLTXHOHVWUDYDX[IRQGDWHXUVVRQWFHX[GH)LVKHUHQ VWDWLVWLTXHVHWODFRUUpODWLRQGLVWULEXWLRQLQIRUPDWLRQSXLVOHVWUDYDX[GH6KDQQRQ TXLRQWSRXUREMHWOHWUDLWHPHQWGHO·LQIRUPDWLRQVRLWXQHUHSUpVHQWDWLRQPpFDQLTXHHW WHFKQLFLHQQH(OOHVWLSXOHTXHO·LQIRUPDWLRQHVWWUDQVPLVHGHPDQLqUHOLQpDLUHTXDQWLÀDEOH HWVHUpGXLWjXQVLJQDODYHFOHVXSSRUWGHQRUPHVODQJDJHVFRGHV/HEXWGHFHWWH WKpRULHHVWG·pWXGLHUOHVORLVjODTXHOOHO·LQIRUPDWLRQHVWVRXPLVHEUXLWHQWURSLHSRXUHQ DVVXUHUXQWUDQVSRUWHQPLQLPLVDQWOHVGLVWRUVLRQV,OVV·DSSX\qUHQWVXUOHVSULQFLSHVGH WKHUPRG\QDPLTXHPHVXUHGXGpVRUGUHRXGHJUpG·LQFHUWLWXGHHQFRPPXQLFDWLRQ&HWWH WKpRULHPDWKpPDWLTXHXWLOLVDQWOHVVWDWLVWLTXHVFRQFOXHTXHLQIRUPHUF·HVWOXWWHUFRQWUHOH FKDRVDÀQGHWUDQVPHWWUHOHPHVVDJH/HVWKpRULFLHQV$ODQ7XULQJPDFKLQHXQLYHUVHOOHGH 7XULQJ1RUEHUW:LHQHUIRQGDWHXUGHODF\EHUQpWLTXHHW9RQ1HXPDQDUFKLWHFWXUHGH9RQ 1HXPDQQRQWSRXUVXLYLOHVWUDYDX[LQLWLDX[VXUO·LQIRUPDWLRQHWOHVSUHPLHUVV\VWqPHV/H GpYHORSSHPHQWFRQVLGpUDEOHGHVRUGLQDWHXUVHWGHVUpVHDX[GHFRPPXQLFDWLRQVRQWFRQGXLW jGHQRPEUHXVHVUHFKHUFKHVVXUWRXWDSSOLTXpHVHWGHVGpYHORSSHPHQWVLQGXVWULHOVWDQW PpWKRGRORJLTXHVWHFKQLTXHVTXHWHFKQRORJLTXHV
6FKpPDG·XQV\VWqPHGHFRPPXQLFDWLRQ6KDQQRQ
%UXLW
6RXUFH &RGHXU &DQDO 'pFRGHXU 8WLOLVDWHXU
/HVGRPDLQHVGHUHFKHUFKHHQ6,VRQWWUqVQRPEUHX[jO·LPDJHGHO·H[SORVLRQGHVWHFK QRORJLHVHWGHVWHFKQLTXHVXWLOLVpHVFRPPHWKpRULHGHO·LQIRUPDWLRQPpWKRGHVIRUPHOOHV FU\SWRJUDSKLHDOJRULWKPLTXHF\EHUQpWLTXHHUJRQRPLHGHVV\VWqPHVFRPSOH[LWpFLQG\QLTXH LQIRUPDWLTXHVpFXULWpHWHUJRQRPLHGHVV\VWqPHVLQIRUPDWLTXHTXDQWLTXHODQJDJHVGH SURJUDPPDWLRQDXWRPDWHVDOpDVHQLQIRUPDWLTXH/DVpFXULWppWDQWSDUQDWXUHWUDQVYHUVH HWV·LQWpUHVVDQWjWRXVOHVFRPSRVDQWVGHVV\VWqPHVHWOHVRUJDQLVDWLRQVKXPDLQHVHQUHOD WLRQHVWXQGHVGRPDLQHVGHUHFKHUFKHFRPSWDQWGHWUqVQRPEUHX[FKDPSVGHUHFKHUFKH GRQWODWUqVFRQQXHFU\SWRJUDSKLHTXHQRXVXWLOLVRQVWRXVOHVMRXUVDYHFQRVFDUWHVEDQFDLUH jSXFH/DFRQIpUHQFHLQWHUQDWLRQDOH,QWHOOLJHQFHDQG6HFXULW\,QIRUPDWLFV©LQWHJUDWHG WHFKQRORJLFDORUJDQL]DWLRQDODQGSROLF\EDVHGDSSURDFKª=HQJ&KHQ:DQJ.DUJXSWD
GH-XLQGHO·,QVWLWXWHRI(OHFWULFDODQG(OHFWURQLFV(QJLQHHUV,(((SURSRVDLW SDVPRLQVGHWKqPHVG·pWXGHQRQOLPLWDWLIGHVXUFURLW$LQVLOHVODERUDWRLUHVHQ66,VRQW QRPEUHX[SRXUFRXYULUWRXVOHVFKDPSVGHUHFKHUFKH0F/HDQ-HWOHVSXEOLFDWLRQV VRQWSOpWKRULTXHVWUqVRULHQWpHVYHUVODUHFKHUFKHDSSOLTXpHVXUOHVWHFKQRORJLHVHWOHVWHFK QLTXHVGHVpFXULWp/DQGZHKUVpFXULWpGHVGpYHORSSHPHQWVGHORJLFLHO%DVNHUYLOOH FRQWU{OHVGHVDFFqVHWGHVUpVHDX[0F/HDQ-ÀDELOLWp0F/HDQGHV V\VWqPHVG·H[SORLWDWLRQGHVORJLFLHOVHWGHVSURWRFROHVUpVHDX[VpFXULWp,QWHUQHWHWGHVPqO YLUXVLQIRUPDWLTXHV$GOHPDQ6]RU«/·,QWHUQDWLRQDO-RXUQDORI&RPSXWHU 6FLHQFHDQG,QIRUPDWLRQ6HFXULW\SXEOLHWRXVOHVPRLVGHVGL]DLQHVG·DUWLFOHVWUDLWDQWGHOD VpFXULWpGHVV\VWqPHVG·LQIRUPDWLRQ/HVUHFKHUFKHVVXUOHVPpWKRGHVIRUPHOOHV:DOWHU +DLJKRQWTXHOTXHVGpYHORSSHPHQWVWKpRULTXHVIRQGDWHXUVHQSDUWLFXOLHUOH PRGqOH%HOO/D3DGXOD,OIRUPDOLVHODSROLWLTXHGHVpFXULWpHQGpFULYDQWOHVUqJOHV GHFRQWU{OHG·DFFqVHQpWDWVVWDWLTXHVDYHFQLYHDX[GHFODVVLÀFDWLRQHWKDELOLWDWLRQVHQ V·DSSX\DQWVXUOHWKpRUqPH%DVLF6HFXULW\7KHRUHP'·DXWUHVPRGqOHVH[LVWHQWFRPPHOH PRGqOHGHQRQGpGXFWLRQEkWLVSRXUOHVpWDWVG\QDPLTXHVRXOHPRGqOH+DUULVRQ5X]]R 8OOPDQGHFRQWU{OHG·DFFqVGLVFUpWLRQQDLUHDYHFXQHPDWULFHG·DFFqV$XWUHGRPDLQHGHOD 66,HQYXHHVWODFU\SWRJUDSKLHHWFRQFHUQDQWOHVDOJRULWKPHVODVXLWHGHO·DUWLFOHDSSRUWHUD GHVpFODLUDJHV3RXUFHTXLHVWGHVUHFKHUFKHVWHFKQRORJLTXHVODFU\SWRJUDSKLHTXDQWLTXHHVW DpWpGpYHORSSpHV%HQQHWW%UDVVDUGHWDGHVDSSOLFDWLRQVRSpUDWLRQQHOOHVDXMRXUG·KXL /HGHX[LqPHFKDPSGHODWKpRULHGHO·LQIRUPDWLRQV·LQWpUHVVHjODSV\FKRORJLHHWjOD F\EHUQpWLTXHVRLWO·LQÁXHQFHGHO·LQIRUPDWLRQVXUOHYLYDQWDYHFOHVWUDYDX[GH*UHJRU\
%DWHVRQpFROHGLWHGH3DOR$OWRHWGH1RUEHUW:LHQHU/HVSULQFLSHV VLPSOLÀpVVRQWOHVVXLYDQWVODFRPPXQLFDWLRQHWO·pFKDQJHVRQWQpFHVVDLUHVjWRXWHYLHHW OHUpHOQHSHXWV·LQWHUSUpWHUTX·DYHFGHVPHVVDJHV$LQVLO·LQIRUPDWLRQSHUPHWGHFUpHUGH O·RUGUHRXQpJXHQWURSLHFHTXLSHUPHWGHFRPEDWWUHODWHQGDQFHQDWXUHOOHjO·HQWURSLHGRQF DXFKDRV&HTXLFRPSWHGDQVFHFRXUDQWHVWGRQFGHFUpHUODUHODWLRQHQWUHOHVDFWHXUVGHOD FRPPXQLFDWLRQGDQVXQSUHPLHUWHPSVSXLVYLHQWHQVXLWHODTXDOLWpGHO·LQIRUPDWLRQWUDQVPLVH 2ULHQWpVXUOHWHUUDLQLQGLYLGXHOHWSV\FKRORJLTXHGHVHIIHWVGHO·LQIRUPDWLRQOHVPRGqOHVGLWj LQIRUPDWLRQLPSDUIDLWHLQFRPSOqWHRXDV\PpWULTXH(LQKRUQHW+RJDUWK6ORYLF )LVFKKRIIHW/LFKWHQVWHLQ.DKQHPDQ6ORYLFHW7YHUVN\HWODWKpRULHGHVMHX[
jLQIRUPDWLRQLQFRPSOqWH0LOJURPHW5REHUWV:LOVRQRQWpWpGpYHORSSpVFHV GHUQLqUHVGpFHQQLHV,OVDSSRUWHQWXQpFODLUDJHQRXYHDXVXUGHVSUREOqPHVGHVGpFLVLRQVHQ HQYLURQQHPHQWQRQPDLWULVpFRPPHOHFpOqEUH'LOHPPHGX3ULVRQQLHU'·DXWUHVUHFKHUFKHV YLVDQWjUpGXLUHO·LQFRQQXRQWGpYHORSSpHVGHVPRGqOHVRULHQWpVVXUOHIRQFWLRQQHPHQWGHV LQGLYLGXVRULHQWpVXUGHO·LQIRUPDWLRQQpFHVVDLUH)XGHQEHUJ/HYLQHHW7LUROHRXELHQ VXUO·DYHUVLRQDX[ULVTXHV5RWK/·DV\PpWULHLQIRUPDWLRQQHOOHGDQVOHVMHX[GpFLVLRQ QHOVQpFHVVLWHXQHUHFKHUFKHGHUHQVHLJQHPHQWVVXSSOpPHQWDLUHVSRXUDWWHLQGUHXQQLYHDX LQGLYLGXHODFFHSWDEOHGHFRQQDLVVDQFHSRXUGpFLGHU.UHSVHW:LOVRQ
8QHFRQYHUJHQFHGHVFKDPSVGHUHFKHUFKHLQLWLDX[PDWKpPDWLTXHHWSV\FKRORJLTXH DOLHXSDUOHGpYHORSSHPHQWGHVFRQFHSWVGHJXHUUHGHO·LQIRUPDWLRQSUpFLWpVLQFOXDQW WDQWO·LQIRUPDWLRQHQWDQWTXHWHOTXHO·RQQRPPHUDFRQWHQXTXHOHVPpGLDVRXPR\HQV ODVXSSRUWDQWTXHO·RQQRPPHUDFRQWHQDQW8QHDSSURFKHJOREDOHDpWpGpYHORSSpHSDU 0DUWLQ/LELFNLSURIHVVHXUDPpULFDLQGX1DWLRQDO'HIHQVH8QLYHUVLW\,QVWLWXWIRU1DWLRQDO 6WUDWHJLF6WXGLHVSXEOLpHHQGDQVO·RXYUDJH©:KDWLV,QIRUPDWLRQ:DUIDUH"ªTXL GpÀQLWOHSpULPqWUHDXWRXUGHVHSWGRPDLQHVJXHUUHGHFRPPDQGHPHQWHWGHFRQWU{OH
JXHUUHGXUHQVHLJQHPHQWJXHUUHpOHFWURQLTXHJXHUUHSV\FKRORJLTXHJXHUUHGHSLUDWDJH LQIRUPDWLTXHJXHUUHpFRQRPLTXHSDUO¶LQIRUPDWLRQHWODF\EHUJXHUUH3XLVGHQRPEUHXVHV SXEOLFDWLRQVHWGRFWULQHVPLOLWDLUHVGpYHORSSHURQWFHVWKqPHVHWLURQWSOXVORLQGDQVOD WKpRULVDWLRQ$OEHUWV$OEHUWVHW+D\HV(Q)UDQFHOHSpULPqWUHVHUDYXGLI IpUHPPHQWHWLOVHGpFOLQHSDVODJXHUUHSDUSRXUHWFRQWUHO·LQIRUPDWLRQ3LFKRW'XFORV
&HSHQGDQWOHVFRQFHSWVpYROXHURQWFDUO·LQIRUPDWLRQQ·HVWTXHODPDWLqUHSUHPLqUH GHODFRQQDLVVDQFH$LQVLOHVWKpRULFLHQVIUDQoDLV&+DUEXORW'/XFDVRX)%+X\JXHV RQWGpYHORSSpVOHFRQFHSWGHJXHUUHGHODFRQQDLVVDQFHRXFRJQLWLYH&HVUpFHQWHVpYROX WLRQVGHVFRQFHSWVVRQWPDLQWHQDQWGHSOXVpWXGLpHVHWIRQWO·REMHWGHUHFKHUFKHFRPPH OHVODERUDWRLUHVIUDQoDLV/H/DUqJH&5,(),0SRXUrWUHPLVHVHQ±XYUHHWRXWLOOpHV
2. Normalisation et standardisation en SSI: de quoi s’agit-il ?
/DQRUPDOLVDWLRQHWODVWDQGDUGLVDWLRQVRQWGHVSURFHVVXVGHIRUPDOLVDWLRQGHUpIpUHQ WLHOVFRPPXQVYLVDQWj©«JDUDQWLUFHUWDLQHVFDUDFWpULVWLTXHVGHVSURGXLWVHWVHUYLFHV QRWDPPHQWODTXDOLWpOHUHVSHFWGHO·HQYLURQQHPHQWODVpFXULWpODÀDELOLWpO·HIÀFDFLWpHW O·LQWHUFKDQJHDELOLWpjXQFRWpFRQRPLTXHªLVRRUJ/HVQRUPHVHWOHVVWDQGDUGV DQJOLFLVPHVRQWGRQFGHVGRFXPHQWVLVVXVG·RUJDQLVPHVVSpFLDOLVpVJRXYHUQHPHQWDX[RX SULYpVFUppVSDUOHVSURIHVVLRQQHOVG·XQVHFWHXUG·DFWLYLWp/HVSULQFLSDX[FRQFHUQDQWOHV 7HFKQRORJLHVGHO·,QIRUPDWLRQHWGHOD&RPPXQLFDWLRQ7,&HWOHXUVpFXULWpLOIDXWFLWHU
O·2UJDQLVDWLRQ,QWHUQDWLRQDOHGH1RUPDOLVDWLRQ,62HWOD&RPPLVVLRQ(OHFWURWHFKQLTXH ,QWHUQDWLRQDOH,(&RUJDQLVPHVGHQRUPDOLVDWLRQG·HQYHUJXUHLQWHUQDWLRQDOH
O·$VVRFLDWLRQ)UDQoDLVHGH1RUPDOLVDWLRQ$)125UHODLVIUDQoDLVGHO·,62
OH&RPLWp(XURSpHQGH1RUPDOLVDWLRQ&(1RUJDQLVPHGHQRUPDOLVDWLRQHXURSpHQ
O·(XURSHDQ7HOHFRPPXQLFDWLRQV6WDQGDUGV,QVWLWXWH(76,VSpFLDOLVpGDQV7,&
O·$PHULFDQ1DWLRQDO6WDQGDUGV,QVWLWXWH$16,UHSUpVHQWDQWO·,62DX[(WDWV8QLV G·$PpULTXH(8$HWSOXVDQFLHQQH
OH%ULWLVK6WDQGDUGV,QVWLWXWLRQ%6,jO·RULJLQHGHODQRUPH,62,(&
OH1DWLRQDO,QVWLWXWHRI6WDQGDUGVDQG7HFKQRORJ\1,67IRXUQLVVHXUVGHQRPEUHX[
VWDQGDUGVHQ66,HQSDUWLFXOLHUGpYHORSSDQWOHV)HGHUDO,QIRUPDWLRQ3URFHVVLQJ6WDQGDUGV ),36XWLOLVpHQFU\SWRJUDSKLH
/HVQRUPHVHWOHVVWDQGDUGVVHGLIIpUHQFLHQWSDUOHXUVRUJDQLVPHVG·RULJLQHSULYpVRX SXEOLFVQDWLRQDX[RXLQWHUQDWLRQDX[OHXUUHSUpVHQWDWLYLWpOHXUIRQFWLRQQHPHQWSDUOHV JURXSHVGHWUDYDLORXOHVFRPPLVVLRQVOHXUPRGHGHGpFLVLRQVOHXUÀQDQFHPHQW3RXU À[HUGHVWUDLWVFDUDFWpULVWLTXHVJpQpUDX[OHVQRUPHVVRQWSULQFLSDOHPHQWLVVXHVG·XQH UHSUpVHQWDWLYLWpODUJHPXOWLVHFWHXUVLQGXVWULHOVHWSXEOLFVDORUVTXHOHVVWDQGDUGVVRQW JpQpUDOHPHQWFHQWUpVVXUGHVVHFWHXUVSUpFLVDQLPpSDUGHVSURIHVVLRQQHOVHQQRPEUHUHV WUHLQWHWSULYp&HVGHUQLHUVVRQWGHVJURXSHPHQWVGHSURIHVVLRQQHOVG·XQVHFWHXUG·DFWLYLWp VRXKDLWDQWLQVWDXUHUGHVUqJOHVHWGHVUpIpUHQFHVGHTXDOLWpSRXUVHVSURGXLWVHWOHVVHUYLFHV GDQVVRQVHFWHXU$LQVLOHVQRUPHVHWOHVVWDQGDUGVUHSUpVHQWHQWGHVLQWpUrWVFRPPXQVHW FROOHFWLIVEkWLVVXUGHVPRGHVGHGpFLVLRQFRQVHQVXHOOH©6RQWUDYDLOUHSRVHVXUOHPRGHGH FRQVHQVXVGRQWO·DERXWLVVHPHQWÀQDOHVWODSULVHHQFRPSWHUpXVVLHGHVLQWpUrWVSDUWLFXOLHUV HWGHO·LQWpUrWFROOHFWLIªDIQRUIU$LQVLOHVDOOLDQFHVHWOHVLQÁXHQFHVU\WKPHQWOHV FRPPLVVLRQVDÀQG·DERXWLUHWGHÀQDOLVHUOHVWUDYDX[©&KDTXHPHPEUHjSDUWHQWLqUHGH
O·,62DOHGURLWGHSUHQGUHSDUWjO·pODERUDWLRQGHWRXWHQRUPHTX·LOMXJHLPSRUWDQWHSRXU O·pFRQRPLHGHVRQSD\V4XHOOHTXHVRLWO·DPSOHXURXODIRUFHGHVRQpFRQRPLHFKDTXH PHPEUHSDUWLFLSDQWDX[WUDYDX[GHO·,62GLVSRVHG·XQYRWH/HVSD\VVRQWVXUXQSLHG G·pJDOLWpSRXULQÁXHQFHUDXQLYHDXVWUDWpJLTXHO·RULHQWDWLRQGHVWUDYDX[GHO·,62DXVVL ELHQTXHOHFRQWHQXWHFKQLTXHGHVQRUPHVªLVRRUJLG/·,62SUpFLVHTXH©/RUVTXHOHV SURGXLWVOHVV\VWqPHVOHVPDFKLQHVHWOHVGLVSRVLWLIVIRQFWLRQQHQWELHQHQWRXWHVpFXULWp F·HVWVRXYHQWSDUFHTX·LOVVRQWFRQIRUPHVjGHVQRUPHVªLVRRUJLG/·,62XWLOLVHj UDLVRQODSUpFDXWLRQDGYHUELDOHSRXUOHVFDVRGHVIDEULFDQWVGHSURGXLWVRXGHVIRXUQLVVHXUV GHVHUYLFHVDXUDLHQWSURGXLUHGHODTXDOLWpKRUVQRUPHV'HSXLVDQQpHGHFUpDWLRQ GHO·,62SDUODYRORQWpGHGpOpJXpVGHSD\VOHQRPEUHGHQRUPHVpGLWpHVSDUO·,62 FURLWUpJXOLqUHPHQWDXWRWDOQRUPHVjÀQVRLWXQHPR\HQQHDQQXHOOHGH QRUPHVPDLVDYHFSRXUODVHXOHDQQpH/DÀJXUHSUpVHQWHODUpSDUWLWLRQGHV QRUPHV,62SDUVHFWHXUWHFKQLTXH
0 1000 2000 3000 4000 5000 6000
Total
Technologies s pécia les
C ons truction
Technologies des ma téria ux
Agriculture et technologie a limenta ire
Tra ns port et dis tribution des ma rcha ndis es
E lectronique, technologies de l'informa tion et télécommunica tions
Techniques de l'ingénieur
S a nté, s écurité et environnement
G énéra lités , infra s tructures et s ciences
)LJXUH3URGXFWLRQGH1RUPHV,62GHDXGpFHPEUHSDUVHFWHXUWHFKQLTXHDX WRWDOQRUPHVGRQWHQ$XWURLVLqPHUDQJHQQRPEUHOHVQRUPHVWUDLWDQW GHO·pOHFWURQLTXHHWGHVWHFKQRORJLHVGHO·LQIRUPDWLRQHWWpOpFRPPXQLFDWLRQVLVRRUJ
/HVRULJLQHVHWOHVUDLVRQVG·rWUHGHFHVRUJDQLVDWLRQVVRQWYDULpHVHWOHVEXWVSRXUVXLYLV VRQWSDUIRLVFODLUHPHQWDIÀFKpV3RXUOH&(1OHVEpQpÀFHVGHODVWDQGDUGLVDWLRQVRQW RXWUHODVpFXULWpHWO·LQWHURSpUDELOLWpO·DEDLVVHPHQWGHVEDUULqUHVDXQpJRFH©«GLPLQ LVKHVWUDGHEDUULHUVªFHQHX/·$16,jODGLIIpUHQFHGHO·,62DpWpIRQGpH SDUGHVDVVRFLDWLRQVSULYpHVGHSURIHVVLRQQHOVHWG·LQJpQLHXUV©,QWKH$PHULFDQ ,QVWLWXWHRI(OHFWULFDO(QJLQHHUVQRZ,(((LQYLWHGWKH$PHULFDQ6RFLHW\RI0HFKDQLFDO (QJLQHHUV$60(WKH$PHULFDQ6RFLHW\RI&LYLO(QJLQHHUV$6&(WKH$PHULFDQ ,QVWLWXWHRI0LQLQJDQG0HWDOOXUJLFDO(QJLQHHUV$,0(DQGWKH$PHULFDQ6RFLHW\IRU 7HVWLQJ0DWHULDOVQRZ$670,QWHUQDWLRQDO«DQVLRUJHWVHVPLVVLRQVVRQW O·DPpOLRUDWLRQGHODFRPSpWLWLYLWpPRQGLDOHGHVHQWUHSULVHVDPpULFDLQHVHQSOXVGHOD TXDOLWpGHODYLHDPpULFDLQHHQHQFRXUDJHDQWHWHQIDFLOLWDQWOHFRQVHQVXVYRORQWDLUHGH QRUPHVHWG·pYDOXDWLRQGHODFRQIRUPLWpGHVV\VWqPHVHWODSURPRWLRQGHOHXULQWpJULWp /H1,67HVWG·REpGLHQFHJRXYHUQHPHQWDOHpWDQWXQHpPDQDWLRQGX'pSDUWHPHQWGX
&RPPHUFH(8$IRQGpHQSRXUSURPRXYRLURXWUHODTXDOLWpGHODYLHO·LQQRYDWLRQ
QRUGDPpULFDLQHHWODFRPSpWLWLYLWpLQGXVWULHOOH´)RXQGHGLQ1,67LVDQRQ UHJXODWRU\IHGHUDODJHQF\ZLWKLQWKH86'HSDUWPHQWRI&RPPHUFH1,67·VPLVVLRQLV WRSURPRWH86LQQRYDWLRQDQGLQGXVWULDOFRPSHWLWLYHQHVVE\DGYDQFLQJPHDVXUHPHQW VFLHQFHVWDQGDUGVDQGWHFKQRORJ\LQZD\VWKDWHQKDQFHHFRQRPLFVHFXULW\DQGLPSURYH RXUTXDOLW\RIOLIHµQLVWJRYLG,OpGLWHOHV)HGHUDO,QIRUPDWLRQ3URFHVVLQJ6WDQGDUGV ),36WUqVXWLOLVpHQFU\SWRJUDSKLH
/HSDQRUDPDFLGHVVXVSUpVHQWHODQRUPDOLVDWLRQHWODVWDQGDUGLVDWLRQDSSHOpHGH GURLWF·HVWjGLUHRUJDQLVpHSDUGHVRUJDQLVPHVLGHQWLÀpVDX[EXWVDIÀFKpVJDUDQWLHV GHVSURGXLWVHWVHUYLFHVSURPRWLRQGHO·LQQRYDWLRQFRPSpWLWLYLWppFRQRPLTXHHWF
&RPPHQRXVOHYHUURQVHQSDUWLFXOLHUGDQVODVWDQGDUGLVDWLRQWHFKQRORJLTXHLOVH FUppGHVVWDQGDUGVGHIDLWF·HVWjGLUHGHVUpIpUHQFHVTXLV·LPSRVHQWSDUOHXUSRVLWLRQ GRPLQDQWHSDUUDSSRUWDX[DXWUHVGDQVXQVHFWHXURXVXUXQPDUFKpGRQQp&HVSUR FHVVXVVRQWFODLUHPHQWGHVLQVWUXPHQWVG·LQÁXHQFHHWG·KpJpPRQLHTX·LOIDXWSUHQGUH HQFRPSWHGDQVOHGpYHORSSHPHQWPRQGLDOGHVpFKDQJHV
eWDSHVG·pODERUDWLRQG·XQHQRUPH,62
3. Normalisation et standardisation dans le domaine technique de la SSI
'DQVOHGRPDLQHWHFKQLTXHOHVVWDQGDUGVGHVpFXULWpVRQWWUqVQRPEUHX[jODPHVXUH GHVWUqVQRPEUHX[VWDQGDUGVHWQRUPHVSRXUO·LQWHURSpUDELOLWpGHVpTXLSHPHQWVGHQRWUH TXRWLGLHQSDUH[HPSOH,(((RX,62&(,SRXUOHUpVHDXLQIRUPDWLTXH VDQVÀO:LÀ,((([SRXUODWHFKQRORJLHUDGLRFRXUWHGLVWDQFHGHFRQQH[LRQ
%OXHWRRWK2QSHXWFLWHUOHVIDPLOOHVGHVWDQGDUGVRPQLSUpVHQWVFRPPHOH7UXVWHG Stages of the développement of international Standards
Stage 1 : Proposal stage
Confirm that particular Interna tional Standard is needed Stage 2 : Preparatory stage
A working group of experts is set up for the preparation of a working draft.
Stage 3 : Commitee stage
As soon as a first committee draft is available, it is registered by the ISO central Secretariat. It is distributed for comment and, if required, voting.
Stage 4 : Enquiry stage
The draft International Standard (DIS) is circulated to all ISO member bodies by the ISO Central Secretariat for voting and comment within a period of five months
Stage 5 : Approval stage
The final draft International Standard (FDIS) is circulated to all ISO member boies by the ISO Central Secretariat for a final Yes/No vote within a period of two months.
Stage 6 : Publication stage
Once a final draft international Standard has been approved, only minor editorial changes, if and where necessary, are introduced into the final text.
&RPSXWHU6\VWHP(YDOXDWLRQ&ULWHULD7&6(&VXUODVpFXULWpGHVFRPSRVDQWVGHVV\V WqPHVHW,QIRUPDWLRQ7HFKQRORJ\6HFXULW\(YDOXDWLRQ&ULWHULD,76(&SRXUGpÀQLUXQH SROLWLTXH66,'HSRUWpHSOXVODUJHODQRUPH,62&(,RX&RPPRQ&ULWHULDIRU ,QIRUPDWLRQ7HFKQRORJ\6HFXULW\(YDOXDWLRQIRXUQLXQODQJDJHVWUXFWXUpSRXUH[SULPHU FHTXHGRLWIDLUHXQSURGXLWGHVpFXULWp,OH[LVWHOHVVWDQGDUGVSOXVGLUHFWHPHQWOLpVDX[
WHFKQRORJLHVFRPPHO·,QWHUQHW3URWRFRO6HFXULW\,36HFSRXUOHSURWRFROH,QWHUQHW,3
$XWUHIDPLOOHGHVWDQGDUGVHQ66,HWQRQGHVPRLQGUHVFDURPQLSUpVHQWHGDQVGHQRP EUHX[V\VWqPHVHWDSSOLFDWLRQVGHFRPPXQLFDWLRQQRXVHQYLURQQDQWQDYLJDWHXU,QWHUQHW FDUWHjSXFHVFDUWH6XEVFULEHU,GHQWLW\0RGXOH6,0SRXUWpOpSKRQHSRUWDEOH«OHV VWDQGDUGV),36GX1,67WUDLWDQWGHODFU\SWRJUDSKLH&HQRPEUHLPSRUWDQWGHVWDQGDUGV YLHQWGXIDLWTXHOHVFRPSRVDQWVHWOHVWHFKQRORJLHVXWLOLVpHVSRXUFRPSRVHUOHVV\VWqPHV G·LQIRUPDWLRQVRQWQRPEUHX[V\VWqPHVG·H[SORLWDWLRQSURWRFROHVUpVHDX[ODQJDJHVGH SURJUDPPDWLRQ«1RWUHSURSRVYDSRUWHUVXUODFU\SWRJUDSKLHDYHFOHVVWDQGDUGV),36 HWOHVIDPHX[HWWUqVXWLOLVpV'DWD(QFU\SWLRQ6WDQGDUG'(66HFXUH+DVK$OJRULWKP 6+$HW$GYDQFHG(QFU\SWLRQ6WDQGDUG$(6
([HPSOHGHPpFDQLVPHVGHFKLIIUHPHQW$(6'(6HW6+$
&HVDOJRULWKPHVRQWSURXYpVJOREDOHPHQWOHXUVROLGLWpLQWULQVqTXHHWUpSRQGHQWDX[
EHVRLQVGHVpFXULWpF·HVWjGLUHDXQLYHDXGHVpFXULWpDWWHQGX&HWWHVROLGLWpHVWjVXU YHLOOHUGDQVO·DYHQLUGXIDLWGHVSXLVVDQFHVGHFDOFXOFURLVVDQWHVDWWHLQWHXQLWDLUHPHQWSDU OHVSURFHVVHXUVHWGHO·LQIRUPDWLTXHGLWHHQJULOOHUHVVRXUFHVLQIRUPDWLTXHVGHFDOFXOHQ UpVHDXSHUPHWWDQWG·DWWHLQGUHGHVSXLVVDQFHVGHFDOFXOWUqVLPSRUWDQWHVJULGFRPSXWLQJ TXLFRQVWLWXHXQHPHQDFHSOXVSUpJQDQWHSRXUO·DYHQLU6LOHVDOJRULWKPHVFU\SWRJUDSKLTXHV SUpVHQWHQWXQHVpFXULWpLQWULQVqTXHFRUUHFWHHOOHHVWLQVXIÀVDQWHFRQFHUQDQWOHXUPLVHHQ
±XYUHHQSDUWLFXOLHUORJLFLHOOHjO·LQVWDUGHVSURJUDPPHVJUDYpVGDQVOHVPpPRLUHVPRUWHV GHVFDUWHVpOHFWURQLTXHV(QO·pTXLSHFKLQRLVHGH;LDR\XQ:DQJDGpPRQWUpTXH 6+$DYDLWXQHVpFXULWpSOXVIDLEOHTXHSUpYXH6WHUQ(QHIIHWOHVDOJRULWKPHV VRQWSUpYXVSRXUXQHVpFXULWpH[SULPpHHQSXLVVDQFH1FRPELQDLVRQVHWGDQVOHFDV GH6+$ODVpFXULWppWDLWUpGXLWHGHAjA'·DXWUHSDUW$(6HVWYXOQpUDEOHDX[
DWWDTXHVGLWHVSDUOHFDFKHF·HVWjGLUHTXHO·REVHUYDWLRQGHO·DFWLYLWpGXSURFHVVHXUVXU OHTXHOO·DOJRULWKPHHVWH[pFXWpSHUPHWGHUpFXSpUHUGHVLQIRUPDWLRQVHWG·HQGpGXLUHOD
FOHIVHFUqWHGHFKLIIUHPHQW$LQVLOHFRQWU{OHGHVDFFqVDXSURFHVVHXUHVWHVVHQWLHOSRXU JDUDQWLUODVpFXULWpHWFHUWDLQVV\VWqPHVG·H[SORLWDWLRQQHSHUPHWWHQWSDVSDUFRQVWUXFWLRQ FHFRQWU{OHFRQVLGpUDQWOHSURFHVVHXUFRPPHXQHUHVVRXUFHSDUWDJpH/HVSXLVVDQFHVGH FDOFXOHQWDXJPHQWHQWOHVWHFKQRORJLHVpYROXHQWHWLOVHPEOHPDLQWHQDQWWHPSVGHUHYRLU FHVRXWLOVFU\SWRJUDSKLTXHVVWDQGDUGVFRQoXVLO\DGpMjTXHOTXHVDQQpHV/H1,67SURSRVH PDLQWHQDQWXQQRXYHOHQVHPEOHFU\SWRJUDSKLTXHOD6XLWH%&U\SWRJUDSK\&HWWHVXLWHYD YUDLVHPEODEOHPHQWVHGLIIXVHUDXGHOjGHVRQSpULPqWUHLQLWLDOTXLHVWOHJRXYHUQHPHQW GHV(WDWV8QLVG·$PpULTXHFDURXWUHOHIDLWTX·HOOHYDrWUHXWLOLVpHSDUOHVIRXUQLVVHXUV JRXYHUQHPHQWDX[SRXUOHVEHVRLQVGXGLWJRXYHUQHPHQWFHVPrPHVLQGXVWULHOVYRQWOH SURSRVHUjOHXUVDXWUHVFOLHQWVDIIDLUHGHUHQWDELOLVDWLRQGHVLQYHVWLVVHPHQWV$LQVLFH QRXYHDXVWDQGDUGYDVHSURSDJHUGDQVOHPRQGHHQWLHU$\UHJDUGHUGHSOXVSUrWFHQRXYHO HQVHPEOHSURSRVHFRPPHRXWLOGHFKLIIUHPHQWV\PpWULTXHOHIDPHX[«$(6©(QSOXV GHO·$(66XLWH%FRPSUHQGGHVDOJRULWKPHVFU\SWRJUDSKLTXHVGHKDFKDJHOHVVLJQDWXUHV QXPpULTXHVHWO·pFKDQJHGHFOpVªQVDJRY$LQVLORLQG·DYDQFHUGDQVOHFKLIIUHPHQWLO HVWSUREDEOHTXHODVpFXULWpSLpWLQHYRLUHSHUGHGXWHPSVIDFHDX[PR\HQVjGLVSRVLWLRQGH ODFU\SWDQDO\VHWRXMRXUVOHSDUDGR[HGXERXFOLHUHWGHODFXLUDVVH&RPPHQRXVVRPPHV HQWUDLQGHOHFRPSUHQGUHO·DGRSWLRQLQFRQGLWLRQQHOOHGHVVWDQGDUGVFU\SWRJUDSKLTXHV WRXWXWLOLVpVRLWLOPrPHUHODWLYHPHQWVROLGHSRXUGHVXVDJHVTXRWLGLHQVGRLWrWUHpWXGLpH VpULHXVHPHQW$LQVLSRXUGHVXVDJHVVSpFLÀTXHVWUqVVHFUHWVHFUHWSRXUGHVGXUpHVWUqV UHVWUHLQWHVJUDGLDQG·LQWHQVLWpLQIRUPDWLRQQHOOHpOHYpOHFKLIIUHPHQWKRUVGHVVWDQGDUGV GRLWrWUHHQYLVDJpGDQVODVWUDWpJLHGHVpFXULWp
4. Normalisation et standardisation dans le domaine technologique de la SSI
'DQVOHFKDPSWHFKQRORJLTXHTXHFHVRLWOHVODQJDJHVGHSURJUDPPDWLRQOHVV\VWqPHV G·H[SORLWDWLRQRXOHVSURWRFROHVUpVHDXSDUH[HPSOHODQRUPDOLVDWLRQHWODVWDQGDUGLVDWLRQ SHUPHWWHQWO·LQWHURSpUDELOLWpGHVFRPSRVDQWVGHVV\VWqPHVG·LQIRUPDWLRQHQWUHHX[$LQVL OHVIRQFWLRQVGHVpFXULWpLQWpJUpHVGDQVFHVFRPSRVDQWVVRQWFRPSDWLEOHVHQWUHHOOHV3RXU DYDQFHUGDQVQRWUHUpÁH[LRQSUHQRQVFRPPHH[HPSOHOHVV\VWqPHVG·H[SORLWDWLRQ/HV SOXVFRXUDPPHQWFRQQXVHWXWLOLVpVGDQVOHVRUJDQLVDWLRQVHQWUHSULVHVHWDGPLQLVWUDWLRQV VRQWOHVVXLYDQWV:LQGRZVGH0LFURVRIWOH0DF2VG·$SSOHODIDPLOOHGHV8QL[DYHFOH FRQQX*18/LQX[/RJLFLHOV/LEUHVRX2SHQ6RXUFHGH/LQXV7RUYDOGV*HFN26GH%XOO O·26G·,%0HWOH=26DQFLHQHW096GHVV\VWqPHVFHQWUDX[,%0&HVV\VWqPHV G·H[SORLWDWLRQVRQWVRLWSXEOLFVVRLWGLWV©SURSULpWDLUHVª/HVV\VWqPHVSURSULpWDLUHVQH IRQWSDVO·REMHWGHVWDQGDUGVRXGHQRUPHVSDUWLFXOLqUHVFDUSDUQDWXUHpWDQWGpYHORSSpV SDUGHVHQWUHSULVHVSURSULpWDLUHVGHFHVV\VWqPHVLOVQHVRQWSDVGpYHORSSpVSDUGHV JURXSHPHQWVLQWHUSURIHVVLRQQHOVRXQRUPDWLIV&HSHQGDQWLOVXWLOLVHQWWRXVGHVVWDQGDUGV WHFKQLTXHVSRXUrWUHFRPSDWLEOHVHWSRXYRLUFRPPXQLTXHUDYHFOHVDXWUHVV\VWqPHVSRUWV GHFRPPXQLFDWLRQSURWRFROHVPHVVDJHULHVHWF/DIDPLOOHSXEOLTXHGHV8QL[V\VWqPH G·H[SORLWDWLRQPXOWLWkFKHHWPXOWLXWLOLVDWHXUFUppHQUpSRQGDXVWDQGDUG3RUWDEOH 2SHUDWLQJ6\VWHP,QWHUIDFH326,;GHO·,(((ROHVGpFOLQDLVRQVSULQFLSDOHVVRQWOH
*18/LQX[OHVGLVWULEXWLRQV%6'%HUNHOH\6RIWZDUH'LVWULEXWLRQHW686(O·$L[G·,%0 HWOH0DF26;G·$SSOH6LRXWUH326,;OHVV\VWqPHVG·H[SORLWDWLRQQHUpSRQGHQWSDV jGHVVWDQGDUGVGHGURLWFDUHQPDMRULWpSURSULpWDLUHVLOHQHVWXQTXLV·LPSRVHDXQLYHDX
PRQGLDOFRPPHXQVWDQGDUGGHIDLW:LQGRZVGH0LFURVRIW/·pWXGHGX*DUWQHU PRQWUHFHWWHSUpGRPLQDQFHVXUOHVDXWUHVV\VWqPHVG·H[SORLWDWLRQDYHFGXUHYHQX GXPDUFKpGHVV\VWqPHVG·H[SORLWDWLRQHQ&HpWDWGHIDLWHVWOHIUXLWG·XQHSROLWLTXH PDUNHWLQJSDUWLFXOLqUHPHQWHIÀFDFHGH0LFURVRIWTXLFRQGXLWSDUH[HPSOHjWURXYHUHQ JUDQGHGLVWULEXWLRQHVVHQWLHOOHPHQWGHVRUGLQDWHXUVLQGLYLGXHOVVRXVV\VWqPHVG·H[SORLWDWLRQ :LQGRZV$SSHOTXLUHSUpVHQWHGHO·RUGUHGHGXPDUFKpGHVRUGLQDWHXUVLQGLYLGXHOV 6RXUFH'DWDWUDFNHU1HW$SSOLFDWLRQ
&HWWHVWDQGDUGLVDWLRQPRQGLDOH GH IDLW SRVH OD TXHVWLRQ GH OD VpFXULWp7RXWHVWSRXUOHPLHX[
GDQV OH PHLOOHXUV GHV PRQGHV SRVVLEOHVVLFHWWHVWDQGDUGL VDWLRQGH IDLW FRQGXLVDLW j XQ PRQGH SOXV VU HW VpFXULVp«
0DOKHXUHXVHPHQW OH V\VWqPH G·H [SO RL W D W L RQ :L QGRZ V GH 0LFURVRIW SRVH GHV SUREOqPHV GHVpFXULWpFRPPHOHPRQWUHOHV FKLIIUHVGHVYXOQpUDELOLWpVUHFHQ VpHVFRPPHVpYqUHVSDUO·86
&(57 &RPSXWHU (PHUJHQF\
5HDGLQHVV7HDPXVFHUWRUJGDQV XQUDSSRUWGHMDQYLHU
&RPPHQRXVYHQRQVGHOHYRLU ODPHLOOHXUHVWUDWpJLHGHVpFXULWp FRQFHUQDQWOHVWHFKQRORJLHVQ·HVW FHUWDLQHPHQWSDVOHFRQIRUPLVPH 6XLYDQWODFULWLFLWpGHVGRQQpHV GHVÁX[RXGHVDSSOLFDWLRQVWUDL WpVKpEHUJpVRXWUDQVLWDQWVXUXQ RUGLQDWHXUOHFKRL[G·XQV\VWqPH G·H[SORLWDWLRQDGDSWpHVWQpFHV VDLUH8QHDXWUHDSSURFKHHVWOH GpYHORSSHPHQW VSpFLILTXH GH V\VWqPHVG·H[SORLWDWLRQ'DQVXQ DUWLFOHGX)LJDURGHPDLUHOD WDQWODFROqUHGXSUHPLHUPLQLVWUH FKLQRLV0:HQ-LDEDRjSURSRVGX SLUDWDJHG·RUGLQDWHXUVGHVHVVHU YLFHVHWODGLIIXVLRQDYDQWO·KHXUH G·XQGHVHVGLVFRXUVLOHVWVLJQDOp TXHFHVRUGLQDWHXUVIRQFWLRQQHQW DYHFXQV\VWqPHG·H[SORLWDWLRQ QRQFRPPHUFLDOHWQRQSXEOLTXH
©N\OLQªHQUpIpUHQFHjO·DQLPDO 5HYHQXVGXPDUFKpPRQGLDOGHVV\VWqPHV
G·H[SORLWDWLRQHQPLOOLDUGVGHGROODUV² HWSUpYLVLRQV*DUWQHU
9XOQpUDELOLWpVUHFHQVpHVSDUV\VWqPHVG·H[SORLWDWLRQ SDUO·86&(57UDSSRUWGHMDQYLHU
FKLPpULTXHGHODP\WKRORJLHFKLQRLVH,O\DWRXMRXUVHXGHVGpYHORSSHPHQWVVXUGHV ODQJDJHVGHSURJUDPPDWLRQHWGHVV\VWqPHVG·H[SORLWDWLRQVSpFLÀTXHVSRXUOHVV\VWqPHV SDUWLFXOLHUVFRPPHOHVV\VWqPHVHPEDUTXpV0DLVSRXUGHVTXHVWLRQVGHFRXWVHWGHGpODLV DFKDWFRXWJOREDOGHSRVVHVVLRQPDLQWHQDQFHHQFRQGLWLRQRSpUDWLRQQHOOHWUDQVPLVVLRQ GHVFRPSpWHQFHVUDSLGLWpGHPLVHHQVHUYLFHOHVV\VWqPHVVXUpWDJqUH&RPPHUFLDORII WKHVKHOI&276HQRSSRVLWLRQDX[SURGXLWVVXUPHVXUHVRQWGHSOXVHQSOXVXWLOLVpV VRXYHQWSRXUOHSLUHHQPDWLqUHGH66,
4LOLQDQLPDOFKLPpULTXH GHODP\WKRORJLHFKLQRLVH
5. Normalisation et standardisation dans le domaine méthodologique de la SSI
/HVPpWKRGHVHQPDWLqUHGH66,VRQWOHIUXLWGHVWUDYDX[G·RUJDQLVDWLRQVpWDWLTXHV SUHVFULSWLYHVEXUHDXGH0LQLVWqUHG·DVVRFLDWLRQVSULYpHVRXGHJURXSHVGHUHFKHUFKH XQLYHUVLWDLUHV(OOHVQHVRQWSDVGDQVO·©HVSULWªGHVQRUPHVHWGHVVWDQGDUGVTXLSUp FRQLVHQWGHVFDUDFWpULVWLTXHVGHSURGXLWVHWVHUYLFHVRXGHVSURFHVVXVG·DPpOLRUDWLRQ FRQWLQXELHQTXHGHVDFWLRQVGHOREE\LQJSRXVVHQWjIDLUHDGRSWHUGHVPpWKRGHVFRPPH QRUPHV'HQRPEUHXVHVPpWKRGHV66,RQWpWpGpYHORSSpHVGHSXLVOHVDQQpHVFDUOH EHVRLQGHFRKpUHQFHHQVpFXULWpjWUqVYLWHpWpSHUoXGXIDLWGHODFRPSOH[LWpVDQVFHVVH FURLVVDQWHGHVV\VWqPHVLQIRUPDWLTXHV/HVPpWKRGHVVRQWXQERQPR\HQGHSDUYHQLUj FHWWHFRKpUHQFHGDQVOHVPHVXUHVGHVpFXULWpSDUQDWXUHGXIDLWGHOHXUFDUDFWqUHV\VWp PDWLTXHHWRUGRQQp/HVSULQFLSDOHVPpWKRGHVSXEOLTXHVXWLOLVpHVDXMRXUG·KXLVRQWOHV VXLYDQWHV2&7$9(2SHUDWLRQDOO\&ULWLFDO7KUHDW$VVHWDQG9XOQHUDELOLW\(YDOXDWLRQ GpYHORSSpHSDUO·8QLYHUVLWpGH&DUQHJLH0HOORQ(8$&5$00&&7$5LVN$QDO\VLV DQG0DQDJHPHQW0HWKRGGX&&7$&HQWUDO&RPSXWHUDQG7HOHFRPPXQLFDWLRQV
$JHQF\RUJDQLVPHJRXYHUQHPHQWDOGX5R\DXPH8QL(%,26([SUHVVLRQGHVEHVRLQV
HWLGHQWLÀFDWLRQGHVREMHFWLIVGHVpFXULWpGpYHORSSpHSDUOD'&66,'LUHFWLRQFHQWUDOH GHODVpFXULWpGHVV\VWqPHVG·LQIRUPDWLRQGLUHFWLRQIUDQoDLVHGpSHQGDQWGX6HFUpWDLUH
*pQpUDOGHOD'pIHQVH1DWLRQDOH0(+$5,0pWKRGHKDUPRQLVpHG·DQDO\VHGHV ULVTXHVTXLVXFFpGDj0$5,21GpYHORSSpHSDUOH&/86,)&OXEGHOD6pFXULWpGH O·,QIRUPDWLRQ)UDQoDLV0**XLGHGHODJHVWLRQGHVULVTXHVG·DWWHLQWHjODVpFXULWp GHVWHFKQRORJLHVGHO·LQIRUPDWLRQGX&6(&HQWUHGHODVpFXULWpGHVWpOpFRPPXQL FDWLRQVGX&DQDGD635LVN0DQDJHPHQW*XLGHIRU,QIRUPDWLRQ7HFKQRORJ\
6\VWHPVGX1,671RXVSRXYRQVFRPSOpWHUFHWWHOLVWHGHVSULQFLSDOHVPpWKRGHVSDU OH&REL7&RQWURO2EMHFWLYHVIRU,QIRUPDWLRQDQGUHODWHG7HFKRQRORJ\GHO·,6$&$
,QIRUPDWLRQ6\VWHPV$XGLWDQG&RQWURO$VVRFLDWLRQUHSUpVHQWpHHQ)UDQFHSDUO·$)$,
$VVRFLDWLRQ)UDQoDLVHGHO·$XGLWHWGXFRQVHLO,QIRUPDWLTXHTXLSURSRVHXQFDGUH PpWKRGRORJLTXHG·DQDO\VHGHODJRXYHUQDQFHHWGXFRQWU{OHGHV6,WUDLWDQWGHODJHVWLRQ GHVULVTXHVGHVpFXULWpGHÀDELOLWpHWGHFRQIRUPLWp'HVVRFLpWpVSULYpHVHWGHVJRX YHUQHPHQWVRQWGpYHORSSpVG·DXWUHVPpWKRGHVTXLQHVRQWSDVSXEOLTXHVHWTXLQHVRQW YLVLEOHVTXHRFFDVLRQQHOOHPHQWRXVXUGHVSODTXHWWHVGHSUpVHQWDWLRQ/DQRUPDOLVDWLRQ GHGURLWSRXUOHVPpWKRGHVQHGHYUDLWSDVDERXWLUFDUFRPPHYXSUpFpGHPPHQWHOOHV QHVRQWSDVGDQVO·©HVSULWªGHVQRUPHVHWGHVVWDQGDUGV(QUHYDQFKHODVWDQGDUGLVD WLRQGHIDLWSHXWFRQGXLUHjXQHKpJpPRQLHG·XVDJHG·XQHPpWKRGHSOXVTX·XQHDXWUH 3DUH[HPSOHGDQVOHVSD\VDQJORVD[RQ2&7$9(VHSUDWLTXHFRXUDPPHQWGDQVOHV HQWUHSULVHVHWO·DGPLQLVWUDWLRQ&HWWHPpWKRGHWLHQWVRQVXFFqVGXIDLWTX·HOOHVHGpFOLQH GDQVGHVRUJDQLVDWLRQVGHSHWLWHVWDLOOHVDYHF2&7$9(66SRXUVPDOOSHWLWH$LQVLOH IUHLQFRQYHQWLRQQHOGHUHVWUHLQWHO·XWLOLVDWLRQGHVPpWKRGHVDX[RUJDQLVDWLRQVGHWDLOOH LPSRUWDQWHHVWOHYp(OOHHVWFRPSRVpHGHWURLVSKDVHVSRXUH[DPLQHUO·RUJDQLVDWLRQ GHODVpFXULWpHWGHVWHFKQRORJLHVXWLOLVpHVDÀQGHEkWLUXQHYXHJOREDOHGHVEHVRLQVGH VpFXULWp(QSUHPLHUOLHXLOV·DJLWG·LGHQWLÀHUOHVDFWLIVFULWLTXHVHWOHVPHQDFHVTXL SqVHQWVXUFHVDFWLIVSXLVGHGpWHFWHUOHVYXOQpUDELOLWpVjODIRLVRUJDQLVDWLRQQHOOHVHW WHFKQRORJLTXHVTXLH[SRVpHVjFHVPHQDFHVFRQGXLVHQWjLGHQWLÀHUOHVULVTXHV/HEXW HVWGHGpYHORSSHUGHVSUDWLTXHVGHVpFXULWp IRQGpHVVXUXQHVWUDWpJLHGHSURWHFWLRQHWGHV SODQVG·DWWpQXDWLRQGHVULVTXHVDÀQG·DLGHU O·RUJDQLVDWLRQGDQVVHVPLVVLRQVHWVHVSULR ULWpV/HVDFWLYLWpVGpURXOpHVV·DSSXLHQWVXU XQFDWDORJXHGHERQQHVSUDWLTXHVDLQVLTXH VXUGHVHQTXrWHVHWGHVTXHVWLRQQDLUHV(Q )UDQFHOHVPpWKRGHVOHVSOXVUHQFRQWUpHV VRQW0(+$5,GDQVOHVHQWUHSULVHVSULYpHV HWO·(%,26GDQVOHVHFWHXUSXEOLF0(+$5,
©FRQoXGDQVOHUHVSHFWGHO·,62ª FOXVLIDVVRIUQRUPHDIIpUHQWHDX[
FRQFHSWV HW PRGqOHV SRXU OD JHVWLRQ 66, DODSDUWLFXODULWpG·DQDO\VHUOHVULVTXHVYLD XQHDSSURFKHLQWpJUDQWOHVSURFHVVXVGHO·RU JDQLVDWLRQ'·DXWUHSDUWHOOHFRQGXLWjOD PLVHHQSODFHG·XQSURFHVVXVGHJHVWLRQGH ODVpFXULWpFRPPHSURPXHSDUO·,62,(&
0pWKRGH(%,26'&66, eWXGH GXFRQWH[WH
,GHQWLÀFDWLRQ GHVREMHFWLIV GHVpFXULVp
'pWHUPLQDWLRQ GHVH[LJHQFHV GHVpFXULWp ([SUHVVLRQ
GHVEHVRLQV GHVpFXULWp
eWXGH GHVPHQDFHV
&RQFHUQDQWO·(%,26VDGpPDUFKHDQDO\WLTXHSDUOHVpOpPHQWVFRQVWLWXWLIVGHV ULVTXHV©HQWLWpVHWYXOQpUDELOLWpVPpWKRGHVG·DWWDTXHVHWpOpPHQWVPHQDoDQWVpOp PHQWVHVVHQWLHOVHWEHVRLQVGHVpFXULWp«ª366,ODUHQGH[KDXVWLYHHWGpWDLOOpH FHTXLSUpVHQWHXQHGLIÀFXOWpSRXUOHVRUJDQLVDWLRQVGHWDLOOHLPSRUWDQWHFRPSUHQDQW GHVPLOOLHUVGHVHUYHXUVSRVWHVGHWUDYDLOVLWHVHWXWLOLVDWHXUV
$XFXQHGHFHVPpWKRGHVQHVHGpPDUTXHYUDLPHQWDXMRXUG·KXLDXQLYHDXQDWLRQDO HWLQWHUQDWLRQDOGRQFHQDEVHQFHGHVWDQGDUGPpWKRGRORJLTXHGHGURLWLOQ·\DSDV DXMRXUG·KXLGHVWDQGDUGVGDQVOHGRPDLQHPpWKRGRORJLTXH66,/·DYHQLUQRXVGLUDVLXQ VWDQGDUGpPHUJH&HSHQGDQWOHVDSSURFKHVEDVpHVWDQWVXUOHVVFpQDULLW\SH0(+$5, TXHVXUREMHWVGHULVTXHVW\SH(%,26VRQWFRPSOpPHQWDLUHVFDUO·DSSURFKHVHIDLWSDU GHVD[HVG·DQDO\VHGLIIpUHQWV$LQVLODGLYHUVLWpHVWSRVLWLYHSRXUOD66,/DVWDQGDUGLVD WLRQVHUDLWHQPDWLqUHPpWKRGRORJLTXHOLPLWDQWGRQFQpJDWLYHSRXUO·HIÀFDFLWpGHOD66,
6. Normalisation et standardisation dans le domaine organisationnel de la SSI
/HGRPDLQHRUJDQLVDWLRQQHOGHOD66,DFRQQXUpFHPPHQWXQFKDQJHPHQWLPSRUWDQW DYHFODSXEOLFDWLRQGHODIDPLOOHGHVQRUPHV,62,(&,QLWLDOHPHQWODQRUPH ,62DSRVpHOHVEDVHVGHVFRQFHSWVHWGHVPRGqOHVSRXUODJHVWLRQ66,WUDLWDQW GHVGpÀQLWLRQVHWGHVFRQFHSWVGHEDVHO·RUJDQLVDWLRQjSUpYRLUGDQVWRXWHHQWUHSULVH ODJHVWLRQGXULVTXHHWOHFKRL[GHVPHVXUHVSUpYHQWLYHV/DIDPLOOHHVWODVpULH GHQRUPHVGpGLpHVjODVpFXULWpGHO·LQIRUPDWLRQ(OOHFRPSRUWHOHVQRUPHVVXLYDQWHV
,62&(,7HFKQRORJLHVGHO·LQIRUPDWLRQ7HFKQLTXHVGHVpFXULWp6\VWqPHV GHPDQDJHPHQWGHODVpFXULWpGHO·LQIRUPDWLRQ9XHG·HQVHPEOHHWYRFDEXODLUH
,,62&(,6\VWqPHGH0DQDJHPHQWGHOD6pFXULWpGHO·,QIRUPDWLRQ606,
³([LJHQFHV
,,62&(,&RGHGHERQQHVSUDWLTXHVSRXUODJHVWLRQGHODVpFXULWpGHO·LQIRUPDWLRQ
,,62&(,6\VWqPHGH0DQDJHPHQWGHOD6pFXULWpGHO·,QIRUPDWLRQ³*XLGH G·LPSOpPHQWDWLRQ
,,62&(,0HVXUHGHODJHVWLRQGHODVpFXULWpGHO·LQIRUPDWLRQ
,,62&(,*HVWLRQGXULVTXHHQVpFXULWpGHO·LQIRUPDWLRQ
,,62&(,([LJHQFHVSRXUOHVRUJDQLVPHVUpDOLVDQWO·DXGLWHWODFHUWLÀFDWLRQGX606,
,,62&(,*XLGHSRXUO·DXGLWGX606,
,OHVWDQRWpTX·LOH[LVWHG·DXWUHV606,O·,6),QIRUPDWLRQ6HFXULW\)RUXP6WDQGDUGRI
*RRG3UDFWLFHO·,7,/,QIRUPDWLRQ7HFKQRORJ\,QIUDVWUXFWXUH/LEUDU\6HFXULW\0DQDJHPHQW HW&2%,79
/DQRUPH,62&(,HVWOHQRXYHDXQRPGHSXLVMXLOOHWGHODQRUPH,62&(, SXEOLpHHQGpFHPEUHSXLVHQMXLQSRXUODGHX[LqPHpGLWLRQ/·,62&(, HVWODYHUVLRQQRUPpHGX&RGHGHERQQHVSUDWLTXHVSRXUODJHVWLRQGHODVpFXULWp GHO·LQIRUPDWLRQ%6GX%ULWLVK6WDQGDUGV,QVWLWXWLRQ&·HVWXQFDWDORJXHGHPHVXUHV GHVpFXULWpTXLQHUHVVHPEOHHQULHQDX[GpPDUFKHVG·DPpOLRUDWLRQFRQWLQXW\SH,62 4XDOLWpRXDX[FDUDFWpULVWLTXHVGHVSURGXLWVRXGHVVHUYLFHVW\SH,62,(&F·HVW SRXUFHODTX·LODIDOOXODFRPSOpWHUSDUOD,OIXUOHUpVXOWDWG·XQWUDYDLOHIÀFDFHGH OREE\LQJjO·,62OLHXGHOXWWHVG·LQÁXHQFHWUqVLPSRUWDQWHVGDQVOHEXWG·LPSRVHUGHVYXHV SDUWLFXOLqUHV
/D66,QHSHXWHQDXFXQFDVVHFRQVWUXLUHVXUXQFDWDORJXHGHPHVXUHVLQDGDSWpDX FRQWH[WHGHO·RUJDQLVDWLRQpWXGLpHVDQVFRQQDLVVDQFHGHVLQIUDVWUXFWXUHVLQIRUPDWLRQQHOOHV VDQVFRQQDLVVDQFHGHVHQMHX[HWGHVREMHFWLIVVDQVFRQQDLVVDQFHGHO·RUJDQLVDWLRQKXPDLQH FRQFHUQpH(OOHOLPLWHO·XWLOLVDWHXUTXLULVTXHGHVHUHVWUHLQGUHjO·DSSOLFDWLRQGHVPHVXUHV SURSRVpHVGDQVODQRUPH(QHIIHWFHUWDLQVSULQFLSHVGHVpFXULWpQHVRQWSDVRXSDUWLHOOHPHQW pYRTXpVOHFORLVRQQHPHQWGHVIRQFWLRQVGDQVOHFDGUHGHODPLVHHQ±XYUHGXSULQFLSHGHEHVRLQ G·HQFRQQDLWUH3ULQFLSHGHVpFXULWp$6+&ORLVRQQHPHQWGHVSRVWHVGHWUDYDLOVHQVLEOHV 366,'&66,OHFKRL[GHVIRXUQLVVHXUVHWGHVWHFKQRORJLHVGH66,GDQVOHFDGUHGHODSROLWLTXH G·DFKDWTXLGGH1RUWHOVRXVOHFRXYHUWGHODORLGHVIDLOOLWHV&KDSWHU%DQNUXSWF\3URWHFWLRQ GHSXLVMDQYLHUIRXUQLVVHXUGHJDUGHEDUULqUH ÀUHZDOO"OHWUDLWHPHQWGHVSHUVRQQHVGLWHVFOHI D\DQWGHVFRQQDLVVDQFHVVXUOHV66,QRQSDUWDJpHV HWQRQH[SOLFLWHV
7. Principes de recherche
/HVFDVTXHQRXVDYRQVSUpVHQWpVGDQVFKDFXQ GHVGRPDLQHVRUJDQLVDWLRQQHOPpWKRGRORJLTXH WHFKQLTXHTXHWHFKQRORJLTXHRQWPRQWUpVGHV OLPLWHVjODQRUPDOLVDWLRQHWjODVWDQGDUGLVDWLRQ 4XHOVSULQFLSHVSRXYRQVQRXVpWDEOLUHQUpSRQVHj QRWUHTXHVWLRQQHPHQWLQLWLDOVXUO·HIÀFDFLWpHQ66, GDQVXQHQYLURQQHPHQWVXMHWjODQRUPDOLVDWLRQHW VWDQGDUGLVDWLRQFRQWLQXH"
6XUOHSODQWHFKQLTXHOHFKRL[GHODFRQIRUPLWp HVWOLpjO·LQWHURSpUDELOLWpVRLWOHVLQWHUDFWLRQVTXH OHV\VWqPHWHFKQLTXHGRLWDYRLUDYHFVRQHQYLURQ QHPHQW6LOHV\VWqPHHVWLVROpLOSHXWV·DIIUDQFKLU
GHVQRUPHVHWVWDQGDUGVV·LOGRLWFRPPXQLTXHU HWpFKDQJHUGHVGRQQpHVLOGRLWVHFRQIRUPHUDX[
SURWRFROHVG·pFKDQJHHWDX[IRUPDWVGHGRQQpHV 3RXUUHSUHQGUHOHFDVGHODFU\SWRJUDSKLHOHVQDYLJDWHXUV,QWHUQHWRXWUHOHIDLWG·rWUHGHVLQWHU SUpWHXUVGHODQJDJHV+70/;0/HWFVRQWVXUWRXWGHVV\VWqPHVGHFKLIIUHPHQW,OVVRQW IDLWVSRXUPHWWUHHQ±XYUHGHVpFKDQJHVFKLIIUpVHQWUHOHVHUYHXUHWOHSRVWHXWLOLVDWHXU6DQV O·XWLOLVDWLRQG·XQDOJRULWKPHGHFKLIIUHPHQWLGHQWLTXHLOVQHSRXUUDLHQWSDVpFKDQJHUHWOLUH GHVPHVVDJHVFKLIIUpV(QUHYDQFKHVLXQV\VWqPHG·LQIRUPDWLRQHVWLVROpLOSHXWGLVSRVHUGH VHVSURSUHVDOJRULWKPHV&RPPHOHVV\VWqPHVGLWVHPEDUTXpVSDUH[HPSOHGDQVGHVDSSDUHLOV YpKLFXOHVRXDXWUHV/HSRQWHQWUHXQV\VWqPHLVROpHWXQV\VWqPHLQWHUFRQQHFWpSHXWrWUHIDLUH YLDGHVSDVVHUHOOHVTXLDXURQWXQU{OHGHFRGHXUGpFRGHXU3RXUOHVV\VWqPHVFRPPXQLFDQWV RXYHUWVOHVVWDQGDUGVSXEOLFVFRPPHOHVDOJRULWKPHVFLWpVGDQVO·DUWLFOHVRQWGRQFOHPRLQV PDXYDLVFKRL[,OIDXWVLPSOHPHQWHVSpUHUTXHFHVVWDQGDUGVVRLHQWVXIÀVDPPHQWVROLGHVIDFH jO·pYROXWLRQGHVWHFKQRORJLHVJULOOHGHFDOFXOF·HVWSRXUFHODTX·LOVpYROXHQWUpJXOLqUHPHQW 6XUOHSODQWHFKQRORJLTXHODTXHVWLRQGHO·XWLOLVDWLRQGHVVWDQGDUGVUHMRLQWFHOOHGHPDLQ WHQDELOLWpGDQVOHWHPSV(QHIIHWOHVDUFKLWHFWXUHVOHVFRPSRVDQWVOHVSURFpGpVGHIDEULFDWLRQ
&UpDWLRQGHVQRUPHV,62,(&HW ,62,(&
pYROXDQWOHVWHFKQRORJLTXHVpYROXHQWQDLVVHQWYLYHQWHWPHXUHQW'RQFOHSUREOqPHTXLVH SRVHjO·RUJDQLVDWLRQRXO·HQWUHSULVHHVWGHFRQVHUYHURSpUDWLRQQHOGDQVOHWHPSVGHVV\VWqPHV SRXYDQWLQWHUDJLUDYHFOHXUHQYLURQQHPHQWFRQVHUYHUOHVFRQQDLVVDQFHVjOHXUVXMHWHWREWHQLU GHVFRPSpWHQFHVGLVSRQLEOHV$LQVLGpYHORSSHUVHVSURSUHVWHFKQRORJLHVFRPPHXQV\VWqPH G·H[SORLWDWLRQVSpFLÀTXHQpFHVVLWHUDXQFRXWGHPDLQWLHQGHFRQGLWLRQRSpUDWLRQQHOpOHYp 5DUHVRQWDXMRXUG·KXLOHVRUJDQLVDWLRQVLQGXVWULHOOHVpWDWLTXHVHWHQWUHSULVHVTXLSHXYHQWRX YHXOHQWV·RIIULUGHVWHFKQRORJLHVHQSURSUH3RXUWDQWHOOHVRIIUHQWXQQLYHDXGHVpFXULWpRSWLPDO HQFHTXLFRQFHUQHOHVDFWHVGHPDOYHLOODQFHFDUHOOHVVRQWLQFRQQXHVGHO·DJUHVVHXUHWHOOHVOXL RSSRVHURQWXQHUpVLVWDQFHELHQVXSpULHXUHjGHVWHFKQRORJLHVSXEOLTXHVRXSRXUVFKpPDWLVHU LOVXIÀWG·DOOHUVXU,QWHUQHWFKHUFKHUOHVYXOQpUDELOLWpVSXEOLpHV6XUOHSODQPpWKRGRORJLTXH O·XWLOLVDWLRQGHVVWDQGDUGVSRVHODTXHVWLRQGXSpULPqWUHFRXYHUWGDQVWRXWHVVHVGLPHQVLRQV DFWLIVSK\VLTXHVHWORJLTXHVWUDLWpVIURQWLqUHVGHO·RUJDQLVDWLRQDFWHXUVFRQFHUQpVGpIHQVH HQSURIRQGHXUWHVWVLQWUXVLIVLQWHUQHVHWH[WHUQHVUHYHUVHHQJLQHHULQJGHVFRPSRVDQWVDXGLWV H[KDXVWLIVRXVWDWLVWLTXHV«/HVPpWKRGHVRQWWRXWHVOHXUVFDUDFWpULVWLTXHVOHXUVDYDQWDJHVHW OHXUVOLPLWHV$XFXQHQ·HVWSDUIDLWHWRXWHVVRQWDSSOLFDEOHVVXLYDQWOHFRQWH[WHGX6,HWO·HIIRUW G·DQDO\VHFRQVHQWL&HOOHVTXLVRQWGHVPpWKRGHVGRLYHQWrWUHXWLOLVpHVFRPPHSUpYXHFDUHOOH SUpVHQWHXQHFRKpUHQFHLQWULQVqTXH&HOOHVTXLUHOqYHQWGXFDWDORJXHGHPHVXUHVQHVRQWTXH GHVJXLGHVGRQFHOOHVSHXYHQWrWUHSULVHVHQFRPSWHSRXUFRPSOpWHUXQGLVSRVLWLIGHPDvWULVH GHVULVTXHVPDLVWRXWQ·HVWSDVjDSSOLTXHUFDUVRXYHQWLQDGDSWpDX6,
'HODPrPHPDQLqUHVXUOHSODQRUJDQLVDWLRQQHOOHVQRUPHVVRQWGHVJXLGHVTXLSHXYHQW DFFRPSDJQHUODFRQFHSWLRQODPLVHHQ±XYUHHWOHVXLYLGHOD66,0DLVOHXUDSSOLFDWLRQ VWULFWRVHQVXQ·HVWSDVUHFRPPDQGpH(OOHVVRQWJpQpUDOHVSHUPHWWHQWGHGpÀQLUGHVFRQFHSWV VHUYHQWGHUpIpUHQFHGHFRPPXQLFDWLRQSHUPHWWHQWG·LQLWLDOLVpHXQHGpPDUFKH0DLVFRPPH HOOHVVRQWLQFRPSOqWHVJpQpUDOHVHWOLPLWpHVHQWHUPHGHSUpFLVLRQGHVGRPDLQHVWUDLWpV IDLWTXHOOHVQHSHXYHQWV·DSSOLTXHUTX·LQFRPSOqWHPHQWjWRXVOHV6,«RXFRPSOqWHPHQWj DXFXQ6,'RQFOHSULQFLSHjUHWHQLUHQPDWLqUHGHQRUPHVRUJDQLVDWLRQQHOOHVHVWGHV·HQ LQVSLUHUPDLVHQDXFXQFDVGHOHVUHFRSLHU
Conclusion
&RPPHQRXVO·DYRQVYXODQRUPDOLVDWLRQHWODVWDQGDUGLVDWLRQHQVpFXULWpGHVV\VWqPHV G·LQIRUPDWLRQHVWXQHUpDOLWpHWHOOHVHSRXUVXLW(OOHSHUPHWO·LQWHURSpUDELOLWpGHVV\VWqPHV PDLVHOOHUHSUpVHQWHXQGDQJHUSRXUODVpFXULWpORUVTXHOHVXWLOLVDWHXUVOHVXWLOLVHQWVDQVGLVFHU QHPHQW/HVQRUPHVHWOHVVWDQGDUGVRQWOHXUFDGUHG·DSSOLFDWLRQOHXUSRUWpHHWOHXUVOLPLWHV ,OVSHXYHQWrWUHGHVJXLGHVPDLVLOVQHGRLYHQWSDVVHVXEVWLWXHUjO·DQDO\VHUDWLRQQHOOHHWDX ERQVHQV/HVSUDWLFLHQVGHOD66,WURXYHURQWXQLQWpUrWjXWLOLVHUOHVQRUPHVHWOHVVWDQGDUGV PDLVQHGHYURQWSDVVHODLVVHUDYHXJOHUSDUHX[,OIDXWVDYRLUDOWHUQHUO·XVDJHGHVPpWKRGHV WHVWHUOHQLYHDXGHVpFXULWpSDUGHVRUJDQLVPHVGLIIpUHQWVDOOHUDXGHOjGHVSUpFRQLVDWLRQV QRUPDWLYHVTXLSHXWOHSOXVSHXOHPRLQV2XWUHOHVELHQIDLWVGHODTXDOLWpHWO·LQWHURSpUDELOLWp FHVSURFHVVXVVRQWDXVVLGHVLQVWUXPHQWVGHODJXHUUHpFRQRPLTXHFDULOVFRQGLWLRQQHQWOHV IDoRQVG·DSSUpKHQGHUOHVTXHVWLRQVHWGHOHVUpVRXGUH$LQVLQRXVHQJDJHRQVOHVSUDWLFLHQV GHODVpFXULWpjODSUXGHQFHHWjJDUGHUWRXMRXUVGXERQVHQVHWGHODMXVWHPHVXUH1·RXEOLRQV SDVTXHOHFU\SWDQDO\VWHTXLUpXVVLWjFDVVHUXQFRGHQ·HQIDLWSDVODSURPRWLRQHWFRQWLQXj OLUHOHVPHVVDJHVGpFKLIIUpVODVpFXULWpDFHWWHGLIÀFXOWpGHVHPHVXUHUIDFHjO·pSUHXYH
Bibliographie
$'/(0$1/$Q$EVWUDFW7KHRU\RI&RPSXWHU9LUXVHV$GYDQFHVLQ&U\SWRORJ\/HFWXUH1RWHVLQ&RPSXWHU 6FLHQFH6SULQJHU%HUOLQ
$/%(576'3$33',QIRUPDWLRQ$JH$QWKRORJ\9RO,&&533XEOLFDWLRQ6HULHV
$/%(576'3$33',QIRUPDWLRQ$JH$QWKRORJ\9RO,,&&533XEOLFDWLRQ6HULHV
$/%(576'3$33',QIRUPDWLRQ$JH$QWKRORJ\9RO,,,&&533XEOLFDWLRQ6HULHV
$/%(576'+$<(653RZHUWRWKHHGJH&&533XEOLFDWLRQ6HULHV
%$6.(59,//( 5,QIRUPDWLRQ V\VWHPV VHFXULW\ GHVLJQ PHWKRGV LPSOLFDWLRQV IRU LQIRUPDWLRQ V\VWHPV GHYHORSPHQW$&0&RPSXWLQJ6XUYH\V
%$7(621*9HUVXQHpFRORJLHGHO·HVSULW6HXLO3DULV
%$7(621*HW58(6&+-&RPPXQLFDWLRQHWVRFLpWp6HXLO3DULV
%$80$5'36WUDWpJLHHWVXUYHLOODQFHGHVHQYLURQQHPHQWVFRQFXUUHQWLHOV0DVVRQ3DULV
%(// ' /$3$'8/$ / 6HFXUH FRPSXWHU V\VWHP XQLÀHG H[SRVLWLRQ DQG 0XOWLFV LQWHUSUHWDWLRQ 0,75(
075%HGIRUG
'$9(1325773586$./,QIRUPDWLRQ(FRORJ\0DVWHULQJWKH,QIRUPDWLRQDQG.QRZOHGJH(QYLURQPHQW 2[IRUG8QLYHUVLW\3UHVV1HZ<RUN
'&66,3ROLWLTXHGH6pFXULWpGHV6\VWqPHVG·,QIRUPDWLRQ9
(,1+251+HW+2*$57+5&RQÀGHQFHLQ-XGJPHQW3HUVLVWHQFHRIWKH,OOXVLRQRI9DOLGLW\3V\FKRORJLFDO 5HYLHZ
(,1+251 + HW +2*$57+ 5%HKDYLRUDO 'HFLVLRQ 7KHRU\ SURFHVVHV RI -XGJPHQW DQG &KRLFH $QQXDO 5HYLHZRI3V\FKRORJ\
)5$1d2,6/%XVLQHVVVRXVLQÁXHQFHeGLWLRQVG·2UJDQLVDWLRQ3DULV
)8'(1%(5*'/(9,1('HW7,52/(-,QÀQLWH+RUL]RQ0RGHOVRI%DUJDLQLQJZLWK2QH6LGHG,QFRPSOHWH ,QIRUPDWLRQ*DPH7KHRUHWLF0RGHOVRI%DUJDLQLQJ&DPEULGJH8QLYHUVLW\3UHVV&DPEULGJH +$5%8/27&/8&$6'HW+8<*8(6)%/DJXHUUHFRJQLWLYHO·DUPHGHODFRQQDLVVDQFH/DYDX]HOOH
3DQD]RO
+$,*+-7$&RPSDULVRQRI)RUPDO6HFXULW\0RGHOV&RPSXWHU6HFXULW\&RQIHUHQFH*DLWKHUVEXUJ .$+1(0$1'6/29,&3HW79(56.<$-XGJPHQW8QGHU8QFHUWDLQW\+HXULVWLFVDQG%LDVHV&DPEULGJH
8QLYHUVLW\3UHVV&DPEULGJH
.(59(51*<eOpPHQWVIRQGDPHQWDX[GHVFLQG\QLTXHVeFRQRPLFD3DULV
.5(36'HW:,/62155HSXWDWLRQDQG,PSHUIHFW,QIRUPDWLRQ-RXUQDORI(FRQRPLF7KHRU\
/$1':(+5&%HVWDYDLODEOHWHFKQRORJLHVIRUFRPSXWHUVHFXULW\,(((&RPSXWHU6RFLHW\:DVKLQJWRQ /,%,&.,0:KDWLV,QIRUPDWLRQ:DUIDUH"86*32:DVKLQJWRQ
0&/($1-$&RPPHQWRQWKH©%DVLF6HFXULW\7KHRUHPªRI%HOODQG/D3DGXOD&HQWHUIRU+LJK$VVXUDQFH
&RPSXWHU6\VWHPV
0&/($1-7KH6SHFLÀFDWLRQDQG0RGHOLQJRI&RPSXWHU6HFXULW\,(((&RPSXWHU6RFLHW\3UHVV:DVKLQJWRQ
0&/($1-1HZSDUDGLJPVIRUKLJKDVVXUDQFHVRIWZDUH3URFHHGLQJVRQWKHZRUNVKRSRQ1HZ VHFXULW\SDUDGLJPV$&01HZ<RUN
0,/*5203HW52%(576-/LPLW3ULFLQJDQG(QWU\XQGHU,QFRPSOHWH,QIRUPDWLRQ$Q(TXLOLEULXP$QDO\VLV (FRQRPHWULFD
3,&+27'8&/26-/HVJXHUUHVVHFUqWHVGHODPRQGLDOLVDWLRQ/DYDX]HOOH3DQD]RO
67(51-3HUVSHFWLYHVVXUODUHFKHUFKHHQFU\SWRORJLH6pFXULWpLQIRUPDWLTXHQXPpUR 72))/(5$/HFKRFGXIXWXU'HQRsO3DULV
72))/(5$/DWURLVLqPHYDJXH'HQRsO3DULV
527+$$[LRPDWLF 0RGHOV RI %DUJDLQLQJ (FRQRPLFV DQG 0DWKHPDWLFDO 6\VWHPV 6SULQJHU9HUODJ %HUOLQ
6+$1121&$0DWKHPDWLFDO7KHRU\RI&RPPXQLFDWLRQ%HOO6\VWHP7HFKQLFDO-RXUQDO DQG
6/29,&3),6&++2))%HW/,&+7(167(,16%HKDYLRUDO'HFLVLRQ7KHRU\$QQXDO5HYLHZRI3V\FKRORJ\
6=253$UWRI&RPSXWHU9LUXV5HVHDUFKDQG'HIHQVH$GGLVRQ:HVOH\,QGLDQDSROLV
:$/7(5.2*'(1:5281'6:%5$'6+$:)$0(6 6 6+80:$<'3ULPLWLYHPRGHOVIRU FRPSXWHUVHFXULW\17,6$OH[DQGULD
:,/62155HSXWDWLRQVLQ*DPHVDQG0DUNHWV*DPH7KHRUHWLF0RGHOVRI%DUJDLQLQJ&DPEULGJH8QLYHUVLW\
3UHVV&DPEULGJH 6LWHV,QWHUQHW
DIQRUIULVRRUJFHQHXDQVLRUJQLVWJRYQVDJRYXVFHUWRUJFOXVLIDVVRIU