Cybersecurity for the French State is changing course. In the face of increasing cyberattacks targeting public administrations, SGDSN and ANSSI unveiled their 2026-2027 cyber roadmap to sustainably strengthen the State's digital resilience.

The document sets out several concrete priorities for the next two years: strengthening cyber governance, securing access, improving threat detection, and preparing for post-quantum cryptography.

This new strategy comes in the wake of several incidents that affected ministries and public institutions in 2025, revealing persistent vulnerabilities across certain information systems.

Cybersecurity managed at the highest level

Through this roadmap, the State aims to evolve its approach to cybersecurity. It is no longer merely a technical matter: it has become an issue of governance, executive oversight, and overall resilience.

Key announced priorities include strengthening cyber governance across ministries. The objective is to clarify responsibilities, increase audits, and further embed cybersecurity into the strategic decisions of government agencies.

Another major focus: the systematic accreditation of critical information systems. Sensitive infrastructures must now be evaluated and validated from a security standpoint before any deployment to production or cloud migration.

Better securing access and critical infrastructure

The roadmap also emphasizes the need to strengthen the protection of Internet-exposed systems, notably messaging services and DNS infrastructures, which are regularly targeted during cyberattacks.

The State also plans to roll out multi-factor authentication (MFA) across the board, further automate access rights management, and phase out generic accounts to minimize the risk of compromise.

Administrative environments will also face heightened measures. IT administrators will be required to use dedicated workstations and strong authentication mechanisms to better protect privileged access.

A priority placed on detection and incident response

Faced with the rise of sophisticated attacks, monitoring and response capabilities must be strengthened across all ministries.

The roadmap specifically provides for the increased deployment of EDR/XDR solutions to improve the detection of malicious behavior, alongside strengthening ministerial CSIRTs tasked with security incident management.

Maintaining security posture (MCO) is likewise a priority workstream. Administrations will need to optimize patch management, reduce equipment obsolescence, and accelerate the remediation of known vulnerabilities.

Anticipating cyber crises and the quantum threat

Beyond the daily protection of systems, the government also seeks to enhance the resilience capabilities of administrations in the event of a major attack.

Ministries will need to systematically integrate cybersecurity into their business continuity plans, supported by regular backup restoration drills and cyber crisis management exercises.

Finally, the State is already anticipating future technological shifts by progressively preparing for the transition to post-quantum cryptography. The objective is to adapt current encryption mechanisms to the future capabilities of quantum computers, which may ultimately challenge certain cryptographic standards in use today.

An underlying trend for all organizations

Beyond the public sector, this roadmap illustrates a broader shift in the cyber landscape. Cybersecurity is now an imperative for governance, business continuity, and digital sovereignty across all organizations handling sensitive data.

In an environment marked by the industrialization of cyberattacks and the proliferation of hybrid threats, the ability to anticipate, detect, and respond rapidly to incidents becomes a critical resilience factor.

To view the full roadmap: https://www.defense.gouv.fr/comcyber/actualites/feuille-route-cyber-letat-2026-2027-renforcer-resilience-numerique