The experience of a highly secure site
Didier Trutt has worked in the industrial sector for over 20 years. He has followed and supported one of the biggest changes of our time, the shift from analog to digital. In September 2009, he was appointed CEO of the Imprimerie Nationale.
The Imprimerie Nationale has recently been listed as an « Operator of Vital Importance », for its production plant in Douai. What impact will this have on the company and on its clients?
In 2006, shortly after the relocation of all our activities linked to the production and personalization of the first electronic passports, the site of Douai was listed as a PS1 site « Point sensible de première catégorie (Sensitive point of first category) ». This classification implied the implementation of a secure perimeter, control and surveillance devices, the traceability of flows, people, vehicles, material and end products, anti-intrusion and warning devices and external mobilisation. The OIV (Operator of Vital Importance) qualification has finalized our approach by integrating the highest physical, IT and network security standards. It is a means of guaranteeing integrity, confidentiality and availability of products and data to our clients. This distinction, along with our nomination for the Security Trophee 2010, is the acknowledgement of the strategic importance of our work on behalf of the State and of our security documents in general.
Managing a highly secure site is a unique experience. What have you learnt?
The system requires very exacting governance: every method or tool must be thoroughly studied before its implementation. We must take into account the nature of what we need to protect, of the risks we will have to face and find ways to fight against them. Once these have been identified, objectives and rules can be defined and the necessary means adopted: management of physical, IT, telematics and databases access, compliance to CNIL regulations, attendance control, digital signatures, confidentiality, authentication, data access… These parameters will determine which security system must be implemented: a secure site may not be sufficient. Systems, networks, processes may also need to be secured… The Imprimerie Nationale can fall back on its experience in Douai to meet the highest security standards. Thereby, the IN has been entrusted with the production of police cards, department of justice cards, municipal police officer cards and taxi cards. Other projects are being developed such as the future CNIe (Electronic National Identity Card) and the electronic European driving licence. The functionality of such cards not only helps develop dematerialized exchanges and the digital economy, it also fosters cost savings and new activities.
Given your history as a printing office, how legitimate are you as a leader in the field of security and high technology?
The processing of sensitive data has always been a core activity for us. For centuries, we have adapted to new needs and technologies. The Imprimerie Natinale's recent reorganization and focus around its three core activities (authentication of people and goods, secure and reliable services, digitized prints and flows) has enabled it to offer appropriate security solutions. The Imprimerie Nationale is an agnostic technology integrator and a secure and reliable service operator: our independent company offers the best possible technologies and services, at competitive prices! Our panoply of technologies is the basis of our know-how in terms of protection against falsification, identity theft or forgery. To do this, we use the best Smart technologies available, supplied to us by the leading companies in the sector (all of which are French). We can also rely on strategic partnerships such as our partnerships with SPS in the field of embedded modules for hybrid or dual interface cards, with Tessi in the field of dematerialization, and with Keynectis in the field of key management infrastructure. In the future, we expect to team up with additional innovative companies which will further our collection of solutions. To conclude, I would like to add that in the light of the Imprimerie Nationale's 500 year long history of commitment to the State and to citizens, we deserve the trust placed into us.
The secure solutions have been developed for the public sector. How can they be adapted to the private sector?
Every company, whether public or private, is faced with data securitization problems: confidentiality, integrity and availability. Our unique experience in the field of State security makes us very competitive because we take ethical aspects of the safeguarding of personal data confidentiality into account. Unquestionably, this makes us a trusted third party for the majority of customers. Our expertise ranges from the implementation of highly secure systems of electronic identification, the hosting of sensitive systems or services, document digitization and archiving, life cycle management of confidential data, to the design and implementation of secure dematerialized systems.
The Imprimerie nationale, key figures:
- Nearly one thousand employees
- Over 15 million secure documents per year
- Une capacité de 20 000 passeports par jour
- A capacity of 20 000 passports per day
- 700 000 tachograph cards for the security of passenger and freight transport
- 50 million personalized mails processed through enterprise output management
- 50 million Banque Postale statements per year
- 100 000 companies connected to the Imprimerie Nationale's dematerialized network for commercial exchanges