A security accreditation process is a formalized process aimed at assessing and approving the security of a system. Accreditation doesn't protect against risks; it helps raise awareness among decision-makers. I managed this process completely independently. My work proceeded as follows:

1. Preparatory work: I immersed myself in the infrastructure, in order to determine the level of approach we needed to adopt, and therefore the precise approach we needed to follow.

2. Risk analysis: The risk analysis was done with CGI. I provided an understanding of the system and our expectations.

3. Security audits: carried out with Ernst & Young, we carried out a technical audit (pentest), an architectural audit as well as a configuration audit.

4. Action plan: taking the results of the risk analysis and audits, I organized the schedule of actions to be carried out in order to reduce the risks of our IS.

5. Commission: I defended our approach to the director, in order to prove to him that he could take the risk of approving our application for approval. It was approved on the grounds of the quality of the work.