Business sectors in cybersecurity
Today, cybersecurity is present in every business sector, but it is not practised in the same way everywhere. Under the European NIS 2 directive, more than 10,000 French organisations in 18 sectors will have to comply with stronger cybersecurity obligations. To understand how cybersecurity jobs differ from one sector to another, read this page.
Banking
Banks have fully embraced digital technology and reshaped their service offering, which is now mostly delivered online. This shift has led to the rise of a new type of fraud targeting online banking services. Protecting users, their digital identity and their remote payment methods is a critical security issue for banks if they are to keep their customers' trust. Cybersecurity lies at the heart of the banking sector's strategy to tackle cyber-attackers and ever more numerous and sophisticated fraud. Identity verification methods must be continually reassessed and the security of banking transactions rethought, in particular by using artificial intelligence to better identify and analyse risks. Since 17 January 2025, the European DORA regulation has required banks and insurers to prove their resilience to IT incidents, including at their service providers.
Industry (Chemicals / Specialty chemicals / Food processing / etc.)
Cybersecurity and regulatory compliance are essential to secure industrial facilities and ensure the controlled development of Industry 4.0. Industrial companies must protect their intellectual property and the integrity and continuity of their manufacturing processes against cyber-attackers, in order to preserve their market share, maintain a competitive edge, offer new services and products, and sometimes even ensure their survival. Digitalisation and new forms of automation are vital and can no longer be held back by cyber risks. Industrial cybersecurity is therefore a major issue for preserving and developing companies in the sector. Under the Cyber Resilience Act, manufacturers of connected products must also guarantee the security of their equipment throughout its life cycle.
Energy
The energy sector is part of every country's critical infrastructure. Any shutdown or failure in this sector following a cyberattack poses human, financial, societal and environmental risks. Fossil, nuclear and renewable energies are all concerned. Its systems are complex, made up of connected devices that must be secured end to end, and they require specific skills, protocols, processes and technologies. This sector is one of the "essential entities" covered by the European NIS 2 directive.
Healthcare
Cybersecurity in healthcare is a top priority. The growing number of attacks on healthcare facilities has highlighted the vulnerability of this sector, as well as its shortage of both people and technology in this area. Hospitals remain among the targets most affected by ransomware in France, and the national CaRE programme is helping them upgrade their security. At the same time, healthcare is undergoing a digital transformation that is changing the way medical data is processed, notably through the IoHT (Internet of Health Things), with an impact on patients, healthcare staff, hospitals, and health and insurance providers.
IT / Telecommunications
Frederick Chang (2012), former Director of Research at the NSA (National Security Agency), explained: "[...] Humans must defend machines that are attacked by other humans using machines. [...]" IT and telecommunications affect every company, organisation, society and State. They represent the technical side of cybersecurity, the most visible part, also known as IT security. IT security is indeed the foundation that protects the other parts of an organisation, a company or, more broadly, a society or a State. Yet, however crucial it may be, IT security is necessary but not sufficient: it represents only a tiny part of the field of cybersecurity.
Business services
The growth of threats and cyberattacks is raising awareness of the importance of cybersecurity in an increasingly connected world. However, not every company or organisation can afford its own dedicated cybersecurity department. To cover all or part of these risks, they turn to digital services companies (ESN), which therefore face a double challenge: covering their own cyber risks and those of their clients.
Transport / Logistics
Whether by sea, rail, air or road, transport is now run and controlled by computer systems. A cyberattack could compromise business continuity or the physical safety of the people using these services. In addition, the interconnection of these systems increases the exposure surface and therefore the potential attack surface for cyber-attackers. Transport is one of the "essential entities" covered by the European NIS 2 directive.
Public administrations & local authorities
Public administrations and local authorities have become prime targets for attackers because of the quality and quantity of personal data they process and store. This sector is also going through its digital transformation, with more and more services available only online. The challenges are many, given the diversity of IT services and the varying size of local authorities and their budgets. With NIS 2, many local authorities (regions, departments, large municipalities) are subject to cybersecurity obligations for the first time.
