🔒

IGI 1300 Cybersecurity Checklist

Free

Assess your IT system compliance with IGI 1300 requirements by classification level. Governance, encryption, physical security, BCP/DRP.

Compliant with IGI 1300 / SecNumCloud / EBIOS RM

🔒Contract parameters

Classification level

Contract type

📋IGI 1300 Compliance — Level S

📊Overall score

🔴Eliminatory

0/13

🟡Major

0/10

✅Total

0/23

🚨

Some eliminatory criteria are not met. The IS accreditation cannot be granted as it stands.

🏛️Gouvernance(0/5)

ISMS policy formally documented🔴 Éliminatoire

Document validated by management and distributed to relevant staff

ISSO (Information Systems Security Officer) designated🔴 Éliminatoire

Named and trained person, reporting to management

EBIOS RM risk analysis performed🔴 Éliminatoire

ANSSI methodology, risk mapping, treatment measures

IS accreditation by the employing authority🔴 Éliminatoire

Complete accreditation file: strategy, EBIOS, security baseline, decision

Staff cybersecurity awareness programme🟡 Majeur

Initial training + annual refresher, signed certificates

🛡️Protection technique(0/6)

Classified data encryption (ANSSI algorithm)🔴 Éliminatoire

Algorithms approved by ANSSI (AES-256 minimum), secure key management

Strong / multi-factor authentication🔴 Éliminatoire

MFA for all access to the classified IS, smart card or token

Centralised logging of all access🔴 Éliminatoire

Time-stamped, centralised logs protected for integrity, retention ≥1 year

Up-to-date antivirus and EDR protection🟡 Majeur

Qualified solution, daily updates, centralised alerts

Network partitioning / segmentation🟡 Majeur

VLAN, internal firewall, DMZ, documented authorised flows

Secure exchange airlock (network diode)🟡 Majeur

Unidirectional transfer between networks of different classification levels

🏢Sécurité physique(0/5)

Restricted Access Zone (ZRR) defined🔴 Éliminatoire

Protected physical perimeter with access control, entry log

Physical access control (badge, biometrics)🔴 Éliminatoire

Badge readers, anti-passback, access traceability

Approved safes for classified media🔴 Éliminatoire

Resistance class adapted to the level, key/combination management

Video surveillance of sensitive areas🟡 Majeur

Cameras with ≥30-day recording, 24/7 supervision for TS

Anti-intrusion alarm and perimeter detection🟡 Majeur

Perimeter detection, real-time alert, response <15min

🔄Continuité(0/4)

Business Continuity Plan (BCP) tested🟡 Majeur

Crisis scenarios, switchover procedures, annual tests

Disaster Recovery Plan (DRP) documented🟡 Majeur

Encrypted backups, fallback site, defined RTO/RPO

Annual penetration tests (qualified PASSI)🟡 Majeur

Audit by an ANSSI-qualified PASSI provider, remediation plan

Cyber incident management procedure🔴 Éliminatoire

Detection, qualification, containment, ANSSI/DRSD notification, post-mortem

💾Supports et données(0/3)

Inventory of classified media🔴 Éliminatoire

Comprehensive register, numbering, movement traceability

Secure destruction procedure🔴 Éliminatoire

P-7 shredder, degausser for magnetic media, destruction certificate

Control of removable media (USB, disks)🟡 Majeur

USB ports disabled or controlled, authorised media registered

Standards & regulations

IGI 1300Instruction Générale Interministérielle n° 1300 — Protection du secret de la défense nationale
II 901Instruction Interministérielle n° 901 — Protection des SI traitant d'informations sensibles
EBIOS RMMéthode ANSSI d'analyse de risques cyber
SecNumCloudRéférentiel ANSSI de qualification des prestataires de services cloud
PASSIPrestataires d'Audit de Sécurité des SI qualifiés ANSSI

This tool provides indicative estimates. Results do not substitute professional advice. Always verify with current regulations.

Related sector guides

Export Control & Defense Cybersecurity

Responding to a public tender?

Generate your technical memorandum with sector expertise enabled.

✨ Generate a technical memorandum

Related tools

🌐

Export Control Self-Assessment

ITAR / EAR / UE 2021/821