Local Authorities : securing privileged access for public services and citizen data

Critical infrastructures under pressure

Local authorities are facing an exponential rise in cyberattacks and increasingly stringent regulatory requirements (NIS2, GDPR…). The consequences are severe:

• Multiple departments and providers : The numerous critical applications used by local authorities involve external access that is often poorly controlled or insufficiently monitored.
• Exposed sensitive data : Citizens' personal information is a prime target for cybercriminals, with major legal and reputational consequences.
• Risk of public service paralysis : A cyberattack can disrupt essential services such as water supply, traffic management, or school administration.
• Rising cyberattacks : Local authorities are increasingly targeted by ransomware, data theft, and attacks on critical infrastructure.
• Lack of cybersecurity resources : A shortage of funding, expertise, and awareness particularly weakens smaller local authorities.
• Increased regulatory pressure : NIS2 and the GDPR impose strict cybersecurity and data protection requirements, with significant penalties for non-compliance.
• Tight budget constraints : Local authorities need sovereign solutions that are simple to deploy and easy to administer, without relying on a dedicated team of experts they neither have the means to recruit nor the time to train.

• Mandatory multi-factor authentication (MFA) : For every remote access to a critical system, PROVE IT enforces strong authentication combining multiple factors, ensuring that no agent, provider, or third party can access sensitive infrastructure without rigorous dual identity verification.
• Simplified network segmentation : PROVE IT facilitates tight compartmentalization of environments (administrative workstations, citizen servers, and industrial systems) by applying granular access rules that ensure each agent only accesses the systems strictly necessary for their duties, limiting the attack surface and the risk of lateral propagation in the event of an incident.
• Real-time logging and auditing : PROVE IT provides complete, timestamped traceability of every action (who accessed what, when, and what was done) and triggers automatic alerts upon detection of abnormal behaviour.

Real-world challenges faced by our customers

How did PROVE IT meet their needs?

• Administration access control : Use of the bastion for both internal and external access since 2022.
• Centralised management : Elimination of shared accounts and strengthened authentication.
• Compliance guarantee : PROVE IT is a certified solution (ANSSI CSPN Security Visa) that meets reliability requirements.

Concrete results:

"PROVE IT is a simple, effective, and secure solution that allows you to regain control over privileged access while integrating seamlessly into an existing environment." - Mr. Fabrice Roccasalva, CISO of Conseil Départemental de l'Aisne

• Control and peace of mind : The solution provides better control over privileged access and contributes to greater confidence in day-to-day security management.
• Operational efficiency : Security efforts focused on the most critical IS entry points, with complete traceability.
• Ease of adoption : An intuitive interface enabling rapid onboarding by teams and a smooth installation process.

What were their needs?

• Secure external interventions : Replace manual access management with a bastion solution for partners and providers.
• Complement the existing security toolkit : Integrate a bastion alongside the existing VPN to strengthen equipment protection.
• Optimise administration : Implement a solution requiring minimal management time for internal teams.

Concrete results following PROVE IT deployment:

"PROVE IT is a product that constantly evolves and works very well. It is a simple, effective, and secure solution that allows you to regain control over privileged access while integrating easily into an existing environment." - Francis Le Croller, Former Head of Operations, city of Vincennes

• Recognition during audits : Following a ransomware attack, an audit highlighted the PROVE IT bastion as a major security strength of the IS, facilitating the award of additional subsidies.
• Operational efficiency : The solution requires less than one hour of administration per month, a crucial time saving for the organisation.
• Immediate adoption : Partners and providers adopted the solution without difficulty ("a win-win product").