Welcome to CLUSIF website

CLUSIF (Club de la Sécurité de l'Information Français), created in 1984, is a not for profit organization allowing professionals dealing with information security (including IT security) to meet, exchange their opinions, work and progress together.

CLUSIF, based in France, is open to contributions and membership from all over the world.

CLUSIF's objective is to welcome IT security staff (CISO, etc.) together with security product and service suppliers and other interested parties. The spirit of CLUSIF is based on mutual exchanges between its members irrespective of their professional role (supplier or “user”). CLUSIF adds contacts on information security with similar organizations , either cross-national (e.g. the CLUSIx in Europe) or regional instances (CLUSIR)

CLUSIF contributes to Information Security education, improvements and awareness via publications resulting from the activity of its work groups, market studies or public conferences and meetings. Most of the documents resulting from these actions are offered to public on this site, including some technical studies translated to English.

CLUSIF also initiates regularly public studies on Cybercrime and security policies.

An important contribution of CLUSIF to the management of Information related risks is provided by a comprehensive risk management methodology, called MEHARI, built around a comprehensive set of modules, tools and questionnaires.
MEHARI 2007 knowledge bases and documentation are downloadable freely.

Technical studies

CYBERCRIME
Cybercrime Overview - 2008 2009	PDF
Cybercrime Overview - 2007 2008	PDF
Cybercrime Overview - 2006 2007	PDF
Cybercrime Overview - 2005 2006	PDF
Cybercrime Overview - 2004 2005	PDF
Cybercrime Overview - 2003 2004	PDF
Cybercrime Overview - 2002 2003	PDF
Cybercrime Overview - 2001 2002	PDF
WHITE PAPERS
Business Continuity Plan - I.S. Strategy and recovery solutions 2004	PDF   Abstract
Wireless networks: threats, advantages and safeguards - english version 2003	PDF
RISK MANAGEMENT
Risk Management, Concepts and Methods 2009	PDF
METHODS
MEHARI 2007 : Knowledge bases 2007	ZIP
MEHARI 2007 : Evaluation Guide for security services 2007	PDF
MEHARI 2007 : Security Stakes Analysis and Classification 2007	PDF
MEHARI 2007 : Risk Analysis Guide 2007	PDF
MEHARI 2007 : Concepts and Mechanisms 2007	PDF
MEHARI 2007 : Overview 2007	PDF
MEHARI : Flier 2005	PDF