Communication toolkit French interdepartmental government network April 16th, 2013 – v0 4

A participative process The network illustrated Strong collaboration between departments Dedicated governance bodies have been created to involve project stakeholders and ensure the consultation of all departments. Promotion of existing assets The government network relies on the broadband optic infrastructure of the recognized French National Telecommunication Network for Technology, Education and Research (RENATER). This has a consistent effect on operating costs optimization. Existing department and cross-department skills will be associated to network management, during both roll-out and operations phases. Gradual deployment of the network Public administrations will be connected to the network in a gradual and flexible way according to their specific needs and constraints. Departmental data centers will be integrated to the system during the building phase so as to ensure a continuity of service for AdER/SIGMA users (AdER/SIGMA is an infrastructure interconnecting a few department networks). Mobile access External hosts International networks Remote sites Partners Administrations French interdepartmental government network Supporting French government digital transformation for a more efficient public action Key figures 12 000 km of optic fiber A 10 Gbit/s backbone 12 points of connection between local networks and the backbone 17 000 sites in Metropolitan France and overseas territories Around 15 departmental information systems transported

A key project for public action renovation A concrete answer to strategic and operational government issues A key driver of public service improvement for end-users and administrations A secured and unified network dedicated to public administrations The French interdepartmental government network has been created to improve overall IT systems security and to respond to rising security threats against information systems. A national scope The interdepartmental government network will provide connectivity between all public administrations in metropolitan France and overseas territories. A long-term and high performance infrastructure built upon reliable existing structures The interdepartmental government network will be able to meet long-term users’ requirements. It will provide high- quality services thanks to its technological characteristics and its broadband fiber optic backbone relying on the infrastructure of the regognized French National Telecommunication Network for Technology, Education and Research (RENATER). Simplified collaboration between public administrations The network roll-out will facilitate information sharing between public administrations by providing them with a better interconnectivity. Information flows towards State partners will be optimized while French government IT system security will be improved. A secured network The network technical architecture will help to improve the security of public administrations infrastructures (in-depth security) against third-party networks (especially the Internet). Controlled operating costs The unification of all department networks will foster infrastructure sharing. This will generate consistent decreases in French government IT operating costs. A single operator for public administrations The network strategic and operational management are placed under the responsibility of a dedicated government agency with national authority (SCN RIE). It will offer public administrations native network services - such as Internet access. User-oriented evolving services Based on a flexible architecture, the interdepartmental government network will offer public administrations and State partners various types of connections to satisfy their needs. All existing services will be integrated natively. Furthermore, the network will drive the development of new service offers meeting for department and cross-department users’ requirements. The interdepartmental government network is at the core of the French government’s digital transformation. It is consistent with strategic guidelines adopted during the interdepartmental committee for public action modernization chaired by French Prime Minister on 18th December 2012. 2013 2014 2015 Sites step-by-step connection to the network Backbone and fiber optic infrastructure construction First perimeter department sites Other sites

Project timeline 2012 2013 2014 2015 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Technical model definition Contracts preparation Launch of consultations on infrastructure building Contracts notifications Economic analysis Budget validation Backbone and fiber optic infrastructure construction Sites step-by-step connection to the network First perimeter department sites Other sites SCN creation Financial and technical framework definition Implementation phase: infrastructure building and time-phased connection of department sites to the network

A dedicated government agency with national authority has been created The government agency with national authority “SCN RIE “ was set-up by decree on December, 17th, 2012 It is responsible for the interdepartmental government network management and for the development of associated services. The network will provide a national and international connectivity between all public administrations in metropolitan France and overseas territories. It reports to the French government information systems director, Jacques Marzin. SCN RIE assignments Interdepartmental government network design and roll-out Management of network operations and maintenance of normal operating conditions and IT security* Implementation of shared services provided by the network Management of the required works to improve network operations and associated services * The assignments related to network security will be led in coordination with the National Agency for IT systems security (ANSSI).

Network infrastructure construction phase Based on the National Telecommunication Network for Technology, Education and Research (RENATER) Fiber optic infrastructure Acknowledged expertise Economic benefits > €20 million Dedicated wavelength for flow transportation Functional autonomy Security Additional links to be built Interconnecting points with the backbone located in department data centers

A project conducted in close coordination with departments Specific issues Project management Services Demonstration project Migration AdER /SIGMA operations management Cross thematic issues Network governance/interdepartmental management structure Technical and functional architecture Security Economic model Management tools Adressing scheme IPv6 implementation A committed and efficient cross-department team is in charge of infrastructure construction management – More than 70 meetings since June 2011 7

International networks Key success factor: selection of an architecture which meets financial efficiency and technical flexibility requirements Mobile access External hosts International networks Remote sites Partners Administrations Architecture based on high-speed fiber optic backbone Points of connection with the backbone hosted in departments datacenters 17 000 sites connected to the points of connection via operators networks (end-to-end) Perennial and flexible architecture supporting the implementation of high-speed connectivity and the development of new services. 8

Starting from 2013, new services will be gradually displayed Services will be progressively available: 1 Available services from the network building phase Internet access for network users Connection to external networks Time server (NTP) Domain name dispute resolution (DNS) 2 Services available gradually Telephony over IP Cross-department videoconferencing File sharing … At the same time, dedicated works are carried out in coordination with department IT directors to implement specific services shared by the DDI/Pref community. 9

Interdepartmental telecommunication network A flexible and evolving architecture based on optic fiber Points of connection with the backbone hosted in departments data centers Building on existing capabilities for key functions of network operations management Backing on RENATER has been instructed and validated An agreement between RENATER and DISIC is in progress First contracts notifications have been issued Fiber optic infrastructure installation has been initiated The construction of the backbone has been launched The construction of a perennial and flexible architecture has been initiated. It will support the implementation of high-speed connectivity and the development of new services.

The interdepartmental telecommunication network addresses two major challenges for the government Local administrations optimisation and mutualisation requirements strengthened by territorial administration reform Government IT systems security Facts Currently, departmental networks are operating separately, they are expensive and unable to evolve according to organizational changes. More their services offer is fragmented while the need for interdepartmental coordination is stronger. Challenges Develop interdepartmental exchanges as part of territorial administration reform, following previous initiatives on infrastructure level (AdER/SIGMA network) and service level (Chorus, ONP) Ensure service continuity and a high quality level Control IT costs Facts A steady increase in cyber attacks against government IT systems A exponential growth of the number of entry points on departmental networks Different IT systems security levels according to the department considered Strengthened information systems defence and security measures since 2011 (information system security policy (PSSI), general security database (RGS), French Network and Information Security Agency (ANSSI)) Challenges Protect French government data heritage Prevent cyber attacks Preserve confidence in government data and services On May 25th, 2012, the Council of Ministers has decided to implement a “secured interdepartmental telecommunication network, unifying departmental networks and ensuring the continuity of public action in case of severe Internet failure”. The network will replace overall existing departmental networks (17 000 sites).

Key success factor: a project with 4 basic principles Long-term operability, supported by sustainable technological options, high-speed backbone and addressing scheme optimizing cross-department exchanges. Network resilience, thanks to a high degree of autonomy from third-party networks and overall IT security management ensuring defence in-depth. Flexible connection options: various types of connections are offered to department sites to respect their constraints and meet their needs (network throughput, availability and service level) Progressive connections to the network: departments impacted by the territorial administrations reform and Culture and Communication department will be connected first. Remaining departments will be connected afterwards according to the expiry date of their operator contract. 12

Cyberdefence is structurally integrated to the government network The French Network and Information Security Agency (ANSSI) is associated to all work in progress to integrate intrusion detection systems. The information systems security is part of a specific working group which involves all departments. Best practices and security requirements are natively part from network specification. During the operational phase, security teams will ensure the maintenance in a state of operational security in close partnership with the French Network and Information Security Agency  A security operating center will be created