In its first version, EBIOS was focused on “security objectives redaction”. Since 2000, DCSSI became aware of improvements in international standards (ISO in particular) and “engaged EBIOS adaptation to this criteria”. It might also be viewed as a way to avoid France’s introspective approach to information security, responding to the limitations of French methods that are not recognized abroad and are unsuited to international markets.
