프랑스의 사이버 안보 전략과 법제

Abstract

Today, cyberspace is no longer a fictional space, but is used as an extended second space of real space. Cybersecurity issues are no longer exclusive to technology experts but are expanding into social science research. Securing the security of cyberspace from cyberattack is now becoming more important as it is essential to the security of the nation beyond personal interests. Major countries such as the United States, Germany, China, and Japan are making legislative efforts to strengthen their capacity for cyber security. In its 2008 Defense and National Security White Paper(「Défense et Sécurité Nationale」), France presented cyber security as a national priority and emphasized the prevention and response to cyber attacks. This trend was further confirmed in the 2013 white paper and succeeded to the 2015 cyber security strategy. France adopted a national cybersecurity strategy in 2015. This Strategy(「Stratégie Nationale pour la Sécurité du Numérique」) aims to accompany French society’s digital transition and address the new challenges of changing uses of digital technology and the associated threats. It focuses on five goals : Guaranteeing national sovereignty, Providing a strong response to acts of cyber crime, Informing the public, Making digital security a competitive advantage for French businesses, Enhancing France’s voice on the international stage. In addition, National Cybersecurity Agency of France(Agence nationale de la sécurité des systèmes d'information : ANSSI) is establishing a pan-governmental control tower-wide cyber security response system as a working central agency for effective response to cyber security threats. Today ANSSI retains a mission of the defence of state information systems, but is also charged with a mission to provide advice and support to government and operators of critical national infrastructure. France's cybersecurity strategy was formed in the recognition and response of Middle Eastern Islamic forces as more serious threats than threats from state actors. In France, the response system for cyber security needs to be understood as an emerging security perspective that emphasizes cyber safety capability in the national affairs rather than in response to traditional military security. The contents of cybersecurity strategy also appear in a comprehensive sense as part of this defense policy or as part of digital strategy. France governs cybersecurity issues in the defense code. Cybersecurity threats are regulated in defense codes throughout the private and public sectors. In France, there are separate rules governing private sector informatization security and national security issues. The issue of “security” in the private sector informatization is approached to rationalize regulation in terms of freedom. Meanwhile, cyber security threats are subsumed as national security threats and are responding through changes in existing defense organizations and policies.