ANSSI ↗
French national cybersecurity agency: guides, EBIOS RM, frameworks.
Public organisations, frameworks and databases useful for risk analysis. Links only: no affiliation.
French national cybersecurity agency: guides, EBIOS RM, frameworks.
Security alerts and advisories.
Assistance and awareness, especially for small organisations.
European Union Agency for Cybersecurity.
Frameworks and publications: CSF, SP 800-30 (risk assessment), SP 800-82 (OT).
Knowledge base of attack techniques, including the ICS matrix.
Community around the EBIOS Risk Manager method.
ISA/IEC 62443 series on industrial automation and control systems security.
Advisories and resources for industrial control systems.
French institute for industrial environment and risks: methods and tools.
Lessons-learned database on technological accidents.
Acute Exposure Guideline Levels (AEGL).
European Chemicals Agency (REACH, CLP).
European major accident reporting system (Seveso).
Industrial safety culture: publications and guides.
French risk management institute: dependability and methods.
Occupational risk prevention: guides, data sheets, tools.
French national agency for working conditions.
European Agency for Safety and Health at Work.
Community around ISO 22301 business continuity management.
Regulation of dangerous goods transport (ADR, RID, ADN).
Health risk assessment for emissions; MODUL’ERS software under a free licence.
Weather data (wind, stability).
French base maps and geographic data.
Investigation reports and videos on industrial accidents in the United States.
Center for Chemical Process Safety: publications and process safety newsletter.
British health and safety regulator: guidance and lessons learned.
European portal on major accident hazard prevention (Seveso directive).
OECD programme on chemical accidents and chemical safety.
Chemical hazard datasheets and the ALOHA dispersion software.
Pocket guide to chemical hazards: exposure limits and protections.
Online risk assessment tools, by sector of activity.
International Labour Organization: occupational safety and health.
UK National Cyber Security Centre: guidance and good practice.
Prioritised security controls from the Center for Internet Security.
Catalogue of vulnerabilities known to be exploited.
US national vulnerability database (CVE, CVSS).
Knowledge base of defensive countermeasures, matched to ATT&CK.
Application security: Top 10, testing guides, threat modelling.
Business Continuity Institute: Good Practice Guidelines.
Contingency planning guide for information systems.
Natural and technological risks by address: public maps and data.
United Nations platform on disaster risk reduction.
International disaster database.
Emergency mapping and climate data from the European programme.
French nuclear safety and radiation protection authority.
International Atomic Energy Agency: safety standards.
US nuclear regulatory authority.
Framework for managing the risks of artificial intelligence.
OECD observatory on AI policies and incidents.
Collaborative database of incidents caused by AI systems.