What is RGS ?
The Referentiel General de Sécurité (RGS) is the regulatory framework defining security rules that French administrations and online public service providers must follow. Published by ANSSI under the December 8, 2005 ordinance, it covers the security of electronic exchanges between users and administrations, as well as between administrations. The RGS defines security levels for authentication, electronic signature, confidentiality, and timestamping, and requires security accreditation of information systems.
Key Points
- Authentication security levels: one star (low), two stars (medium), three stars (high)
- Electronic signature requirements aligned with eIDAS: simple, advanced, qualified
- Security rules for exchange confidentiality and encryption
- Mandatory security accreditation for all public information systems
- Mandatory use of ANSSI-qualified products and providers for high security levels
Why Zaxyr
Zaxyr supports administrations and public service providers in their RGS compliance. The platform tracks the 14 security rules, automates accreditation file preparation, and provides native mapping to ISO 27001, LPM, and NIS2 for unified compliance management.