{"id":65613,"date":"2026-10-15T09:00:00","date_gmt":"2026-10-15T07:00:00","guid":{"rendered":"https:\/\/www.cbeconsulting.fr\/?p=65613"},"modified":"2026-10-22T02:13:32","modified_gmt":"2026-10-22T00:13:32","slug":"ransomware-cyber-coverage-french-subsidiaries","status":"publish","type":"post","link":"https:\/\/www.cbeconsulting.fr\/en\/ransomware-cyber-coverage-french-subsidiaries\/","title":{"rendered":"Ransomware in France: what your cyber policy actually covers (and excludes)"},"content":{"rendered":"<div class=\"wpb-content-wrapper\">\r\n<style id=\"cbe-hide-demo-blocks\">\r\n\/* Cache les blocs d\u00e9mo Loyde inject\u00e9s sous l'article *\/\r\n.single-post .crea-vc-customheading-c3c133b6f9181e4c16857e82a56be3de,\r\n.single-post .crea-vc-customheading-d5c5ad1ffe670ae35f554d35c3d21fb8,\r\n.single-post .crea-vc-customheading-3493d8c0ce0369d6a3ef4d4289c9f786,\r\n.single-post .crea-vc-customheading-901c639b824cb92e6104987bc1f26670,\r\n.single-post .crea-vc-customheading-2f4277082329a98cb9007844a8e2f099,\r\n.single-post .crea-vc-customheading-969bce1c7d5cd04876b16a64f59eaea3 { display:none !important; }\r\n.single-post #cta-box-10 { display:none !important; }\r\n.single-post .vc_row.vc_custom_1624481012749,\r\n.single-post .vc_row.vc_custom_1624567533004,\r\n.single-post .vc_row.vc_custom_1601502462089,\r\n.single-post section#cta-box-10,\r\n.single-post .vc_row.vc_custom_1583934384566 { display:none !important; }\r\n.single-post .crea-flex-flex-basis-expand-shrink-according-to-container.wh-content-box[data-crea-unique-random-number=\"992101c734a1956ec70e51d278249606\"],\r\n.single-post .crea-flex-flex-basis-expand-shrink-according-to-container.wh-content-box[data-crea-unique-random-number=\"8c8217f34df706a4fcfcb50caba1ed1d\"] { display:none !important; }\r\n\r\n\/* Fix : le menu principal en haut de page sur les articles est invisible (header en mode transparent\r\n   alors qu'il n'y a pas de hero behind). On force la couleur des liens et CTA en sombre. *\/\r\n.single-post .wh-header-inner .sf-menu > li > a,\r\n.single-post .wh-header-inner .crea-default-menu-main a,\r\n.single-post .wh-header-inner .crea-nav-item > a,\r\n.single-post .wh-header-inner #cbp-menu-main a {\r\n  color: #051c2c !important;\r\n  opacity: 1 !important;\r\n}\r\n.single-post .wh-header-inner .sf-menu > li > a:hover,\r\n.single-post .wh-header-inner .crea-nav-item > a:hover {\r\n  color: #057DBC !important;\r\n}\r\n\/* S\u00e9curit\u00e9 : retire toute opacit\u00e9 < 1 ou color blanc forc\u00e9 sur la nav du header sur single-post *\/\r\n.single-post header.wh-header .crea-nav-item,\r\n.single-post header.wh-header .crea-default-menu-main {\r\n  opacity: 1 !important;\r\n}\r\n.single-post header.wh-header .crea-nav-item > a span,\r\n.single-post header.wh-header .crea-nav-item > a {\r\n  color: #051c2c !important;\r\n}\r\n<\/style>\r\n\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>Written by Jean-Georges NANOT, May 13, 2026<\/strong><\/p>\r\n\r\n\r\n\r\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">Table of contents<\/h2>\r\n\r\n\r\n\r\n<ol class=\"wp-block-list\">\r\n<li>Understanding ransomware in 2026<\/li>\r\n<li>What French cyber policies cover for ransomware<\/li>\r\n<li>Subscription requirements and exclusions in 2026<\/li>\r\n<li>The first 48 hours: ransomware response protocol<\/li>\r\n<li>Conclusion: pay or don\u2019t pay, insurance is the last line<\/li>\r\n<li>Real-world case: ransomware at a French subsidiary, decision not to pay<\/li>\r\n<li>Frequently asked questions<\/li>\r\n<\/ol>\r\n\r\n\r\n\r\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">Introduction<\/h2>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">According to ANSSI\u2019s 2025 cybermenace panorama, ransomware remains the first cyber threat in France in both volume and impact. More than 1,200 significant incidents were handled by French national authorities, of which 60% targeted mid-cap and SME entities. The average ransom demand has risen 38% between 2023 and 2025, and the total cost of a ransomware incident in France averaged EUR 4.17M per IBM Cost of a Data Breach 2024.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">For foreign-headquartered groups operating French subsidiaries, ransomware response requires French-specific dispositions: French-language forensic team, French-language negotiator if payment considered, CNIL notification compliance, French Code des assurances notification deadlines, and coordination with the global cyber program. CBE Consulting advises foreign groups on French-specific ransomware response setups.<\/p>\r\n\r\n\r\n\r\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">1. Understanding ransomware in 2026<\/h2>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">Threat evolution<\/h3>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Three major transformations of ransomware since 2017-2019:<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>Attacker professionalization<\/strong>: criminal groups operate in ransomware-as-a-service mode. Malware developers rent tools to affiliates. This specialization makes attacks more sophisticated, better targeted, harder to detect.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>Systematic double extortion<\/strong>: since 2020, attackers exfiltrate data before encrypting it. If the company refuses to pay, data is published on public sites or sold. This dual pressure (encryption + disclosure) increases psychological and financial pressure on directors.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>Supply chain and IT provider targeting<\/strong>: attackers compromise an IT provider (cloud host, MSP, IT outsourcer) then propagate to clients. Cases: Kaseya (2021), MOVEit (2023). A French subsidiary can be hit by ransomware without being the initial target.<\/p>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">Attacker ecosystem<\/h3>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Three families structure the 2026 landscape:<\/p>\r\n\r\n\r\n\r\n<ul class=\"wp-block-list\">\r\n<li><strong>Organized criminal groups<\/strong>: LockBit (until partial dismantling in 2024), Black Basta, Cl0p, Akira, Play. Pure financial logic. Target mid-caps and large accounts based on estimated payment capacity<\/li>\r\n<li><strong>Independent affiliates<\/strong>: pirates using RaaS tools rented from main groups. Varied profiles, less predictable<\/li>\r\n<li><strong>State actors<\/strong>: groups linked to states (Russia, North Korea, Iran, certain Chinese factions) using ransomware as financing or destabilization tool. Rarer but more complex (sanctions clause)<\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">Average cost and impact in France<\/h3>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Per IBM Cost of a Data Breach 2024 and ANSSI:<\/p>\r\n\r\n\r\n\r\n<ul class=\"wp-block-list\">\r\n<li><strong>Average total cost of ransomware loss<\/strong> for a French mid-cap subsidiary: EUR 4.17M<\/li>\r\n<li><strong>Average operational shutdown<\/strong>: 18-28 days<\/li>\r\n<li><strong>Cost breakdown<\/strong>: business interruption 45-55%, forensic and reconstruction 25-35%, GDPR legal fees 8-12%, crisis communication 5-8%, ransom (if paid) 5-15%<\/li>\r\n<li><strong>French companies paying ransom<\/strong>: in decline from 50% in 2020 to ~25% in 2025<\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Total economic cost exceeds 5-8 times the ransom amount. Not paying doesn\u2019t eliminate the loss, it\u2019s just one decision among many.<\/p>\r\n\r\n\r\n\r\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">2. What French cyber policies cover for ransomware<\/h2>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">Five activatable coverages<\/h3>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">A modern French cyber policy activated for ransomware covers five components:<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>1. Forensic and investigation costs<\/strong>: handled by a specialized team (Mandiant, Kivu, Arete, Crowdstrike, NTT Security) commissioned by the insurer. Investigation of entry vectors, compromise perimeter, exfiltrated data. Typical cost: EUR 50-250K for a French mid-cap.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>2. IT system and data reconstruction<\/strong>: replacement of compromised hardware, system reinstallation, backup restoration, post-incident security audit. Typical cost: EUR 100-400K for a French mid-cap.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>3. Business interruption<\/strong>: indemnification of revenue loss during operational shutdown, on the negotiated indemnification period (typically 6-12 months). Often the most important loss item.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>4. Cyber extortion<\/strong>: covers under strict conditions ransom payment, agreed negotiator fees, ancillary costs (cryptocurrencies, Bitcoin purchase on regulated platforms).<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>5. GDPR legal fees and notifications<\/strong>: specialized French digital law attorneys, CNIL notifications and affected persons (a recent case affected 4,200 persons), defense against civil actions, French expert judicial fees.<\/p>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">Ransom payment mechanism<\/h3>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Ransom payment by the cyber insurer follows a strict 2026 protocol:<\/p>\r\n\r\n\r\n\r\n<ul class=\"wp-block-list\">\r\n<li><strong>Step 1<\/strong>: immediate declaration to insurer via 24\/7 hotline<\/li>\r\n<li><strong>Step 2<\/strong>: mobilization of agreed negotiator (Coveware, Kivu, Mandiant Negotiations, Arete Negotiation Services)<\/li>\r\n<li><strong>Step 3<\/strong>: encryption technical quality analysis (will post-payment decryption be reliable?)<\/li>\r\n<li><strong>Step 4<\/strong>: OFAC sanctions clause verification: is the ransom beneficiary on a sanctions list?<\/li>\r\n<li><strong>Step 5<\/strong>: insurer and negotiator recommendation (pay or not)<\/li>\r\n<li><strong>Step 6<\/strong>: final company decision (insurer never obligates payment)<\/li>\r\n<li><strong>Step 7<\/strong>: if payment, execution via regulated channels (cryptocurrencies from agreed exchanges, fiscal traceability)<\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">This protocol typically takes 5-15 days depending on complexity, during which the company operates in degraded mode.<\/p>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">OFAC sanctions: the limiting clause<\/h3>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>OFAC<\/strong> (Office of Foreign Assets Control, US Treasury agency) publishes a list of sanctioned persons and entities (SDN List) where any payment is illegal for actors under US jurisdiction. Several ransomware groups have been added to this list since 2020: Evil Corp (2019), TrickBot, Conti (partially), certain LockBit factions.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">If the identified attacker is on the SDN List, ransom payment is <strong>illegal<\/strong> and <strong>not covered<\/strong>. The policy\u2019s sanctions clause automatically activates this exclusion. The company must then manage without ransom payment: reconstruction from backups or partial data abandonment.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">This dimension partly explains the payment rate decrease since 2020. Regulatory pressure and the sanctions clause strongly incentivize rebuilding rather than paying.<\/p>\r\n\r\n\r\n\r\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">3. Subscription requirements and exclusions in 2026<\/h2>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">War exclusion (extended)<\/h3>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Since Merck v. ACE (2022) and Mondelez v. Zurich (2023) case law, French and European courts confirmed that cyber attacks attributed to a state can be excluded under the war exclusion of cyber policies. Insurers have hardened wording: exclusion of any cyber act attributable to a state or para-state actor.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">To negotiate finely: too-broad wording (excluding any attack \u201coriginating\u201d from a given country) creates major risk because state attribution is often contested. Preferred wording requires official attribution by US or European authorities (CISA, ANSSI), not mere presumption.<\/p>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">Gross negligence and patch defaults<\/h3>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Cyber insurers now explicitly exclude losses caused by <strong>gross negligence<\/strong>: non-application of critical patches known for several months, total absence of MFA on privileged access, manifestly insufficient practices. This exclusion doesn\u2019t apply to reasonable failures but to characterized failures.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">To limit this exclusion\u2019s application: documented patch management program (policy, frequency, documented exceptions) and demonstration that practices conform to references (NIST CSF, ANSSI PSSI guide).<\/p>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">Minimum technical requirements<\/h3>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">In 2026, French cyber insurers no longer grant coverage without a minimum cybersecurity floor:<\/p>\r\n\r\n\r\n\r\n<ul class=\"wp-block-list\">\r\n<li><strong>Generalized MFA<\/strong> on remote and privileged access<\/li>\r\n<li><strong>EDR<\/strong> or next-generation antivirus<\/li>\r\n<li><strong>Immutable backups<\/strong> (offline or isolated cloud)<\/li>\r\n<li><strong>Documented incident response plan<\/strong>, tested annually<\/li>\r\n<li><strong>Annual phishing training<\/strong> with exercises<\/li>\r\n<li><strong>Privileged account management<\/strong> (PAM, password vault)<\/li>\r\n<li><strong>Documented patch management<\/strong><\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">The subscription questionnaire counts 60-120 questions. For mid-cap French subsidiaries, a preliminary audit by a commissioned preventionist has become standard.<\/p>\r\n\r\n\r\n\r\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">Free assessment of your ransomware coverage<\/h3>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Does your French subsidiary have a cyber policy subscribed more than 18 months ago, or no cyber coverage currently? CBE Consulting offers a free assessment of your ransomware exposure and coverage. 30 minutes by video, no commitment.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><a href=\"\/en\/#contact\">Request an assessment \u2192<\/a> \u00b7 +33 9 80 43 16 34 \u00b7 secretariat@cbeconsulting.fr<\/p>\r\n\r\n\r\n\r\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">4. The first 48 hours: ransomware response protocol<\/h2>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">Detection and declaration<\/h3>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">The first hours following ransomware detection largely condition the loss outcome. Six actions in parallel in the first 6 hours:<\/p>\r\n\r\n\r\n\r\n<ol class=\"wp-block-list\">\r\n<li><strong>Activate the internal crisis cell<\/strong> (CEO, IT\/CISO, legal, communications, HR)<\/li>\r\n<li><strong>Isolate compromised systems<\/strong> to prevent propagation (network disconnection, don\u2019t shut down)<\/li>\r\n<li><strong>Preserve evidence<\/strong> (logs, RAM memory, compromise indicators)<\/li>\r\n<li><strong>Contact the insurer\u2019s cyber hotline<\/strong> (number on policy cover page)<\/li>\r\n<li><strong>Do not attempt autonomous negotiation<\/strong> with attackers<\/li>\r\n<li><strong>Prepare initial communication<\/strong> (internal and external per affected perimeter)<\/li>\r\n<\/ol>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Declaration speed to insurer often conditions resolution success. Late declaration over 48 hours can trigger coverage restrictions.<\/p>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">Forensic and evidence preservation<\/h3>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">The forensic team commissioned by the insurer intervenes within 24-48 hours, generally remotely first, on-site after if necessary. Three objectives:<\/p>\r\n\r\n\r\n\r\n<ul class=\"wp-block-list\">\r\n<li><strong>Identify entry vector<\/strong>: phishing, exploit, provider compromise, remote access<\/li>\r\n<li><strong>Measure compromise perimeter<\/strong>: machines affected, accounts used, data accessed<\/li>\r\n<li><strong>Evaluate exfiltration<\/strong>: what data exited, to what destination, qualify applicable GDPR<\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">The forensic produces a technical report serving as basis for all subsequent decisions: pay or not, reconstruction, notifications, legal defense.<\/p>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">Decision on ransom and reconstruction<\/h3>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Beyond forensic, the major decision is to pay or not. Typical decision criteria:<\/p>\r\n\r\n\r\n\r\n<ul class=\"wp-block-list\">\r\n<li><strong>Backup quality<\/strong>: if immutable backups intact and exploitable, reconstruction preferable<\/li>\r\n<li><strong>Exfiltration perimeter<\/strong>: if sensitive data exfiltrated, payment doesn\u2019t suppress disclosure risk (broken promises on attacker side)<\/li>\r\n<li><strong>OFAC sanctions verification<\/strong>: if prohibited, no choice<\/li>\r\n<li><strong>French government position<\/strong>: since 2024, official position is not to pay<\/li>\r\n<li><strong>Cost-benefit calculation<\/strong>: ransom vs.\u00a0reconstruction cost from backups<\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">In 2025, about 75% of French companies hit now choose not to pay. Reconstruction from immutable backups has demonstrated effectiveness when the disposition is properly prepared in advance.<\/p>\r\n\r\n\r\n\r\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">5. Conclusion: pay or don\u2019t pay, insurance is the last line<\/h2>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Ransomware remains in 2026 the first cyber threat for French subsidiaries of foreign-headquartered groups. Properly dimensioned cyber insurance covers 70-95% of a ransomware loss, provided technical subscription requirements are respected in advance, declaration is fast in case of loss, and the pay-or-not decision is made in full information.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">For French operations, the dedicated French cyber policy or the proper coordination of the global cyber policy with French requirements is essential. To engage a personalized audit, contact CBE Consulting via the <a href=\"\/en\/#contact\">contact page<\/a>.<\/p>\r\n\r\n\r\n\r\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">6. Real-world case: ransomware at a French subsidiary, decision not to pay<\/h2>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>Context<\/strong>: French subsidiary of a US distribution group (subsidiary revenue EUR 140M, 320 employees, 4 logistics warehouses, central ERP). Cyber policy subscribed 2 months before attack: limit EUR 2M, deductible EUR 50K, cyber extortion coverage included.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>Detection and declaration (May 2024)<\/strong>: * Monday 6:00 AM: IT discovers ERP encrypted, ransom message displayed * Monday 9:00 AM: declaration to cyber insurer via 24\/7 hotline * Monday 12:00 PM: Mandiant forensic team on site<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>Forensic investigation (days 1-5)<\/strong>: * Identified vector: targeted phishing on accountant 6 days earlier * Privilege escalation in 4 days, ransomware deployment on day 5 * Exfiltration of 220 GB of data (customers, financial, HR) * Identified group: Black Basta (not OFAC-sanctioned, payment legally possible)<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>Ransom demand<\/strong>: EUR 1.8M in Bitcoin, decryption promised within 24h after payment.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>Decision Friday (day 5)<\/strong>: * Immutable backups intact (verified by forensic): reconstruction possible * Exfiltrated data: disclosure risk maintained even if payment * French government position: do not pay recommendation * Decision: <strong>do not pay<\/strong>, reconstruct from backups<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>Reconstruction (days 5-17)<\/strong>: * Days 6-10: critical server reconstruction * Days 11-14: progressive ERP restoration in degraded mode * Days 15-17: complete operations resumption<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>Final costs<\/strong>: * Forensic: EUR 85K * IT reconstruction: EUR 240K * Crisis communication: EUR 45K * Business interruption over 17 days of partial shutdown: EUR 1.2M * GDPR legal fees and CNIL notifications (4,200 persons): EUR 35K * <strong>Total loss: EUR 1.605M<\/strong><\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>Insurance indemnification<\/strong>: * Policy limit EUR 2M \u2713 * Deductible EUR 50K * Sub-limits respected * <strong>Final indemnification: EUR 1.48M<\/strong> (92% of loss covered) * At charge: EUR 125K<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>Lesson<\/strong>: declaration speed (3 hours after detection) and immutable backup quality (set up 6 months earlier on cyber audit recommendation) enabled avoiding ransom payment. Without cyber policy, this loss would have hit EBITDA by EUR 1.6M, about 11% of 2023 EBITDA.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><em>Case profile from ANSSI Panorama de la cybermenace 2024, Mandiant M-Trends 2024, IBM Cost of a Data Breach 2024 reports.<\/em><\/p>\r\n\r\n\r\n\r\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">Have CBE Consulting assess your French subsidiary\u2019s ransomware exposure<\/h2>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Our consultants offer:<\/p>\r\n\r\n\r\n\r\n<ul class=\"wp-block-list\">\r\n<li>A free assessment of your cybersecurity disposition and ransomware coverage<\/li>\r\n<li>A review of technical requirements to optimize your conditions<\/li>\r\n<li>A costed recommendation for coverage evolution<\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>No commitment, by video, 30 minutes.<\/strong><\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><a href=\"\/en\/#contact\">Request an assessment \u2192<\/a><\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Phone: +33 9 80 43 16 34 Email: secretariat@cbeconsulting.fr<\/p>\r\n\r\n\r\n\r\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">7. Frequently asked questions<\/h2>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>Should we pay a ransom in case of ransomware?<\/strong> The final decision belongs to the company. In 2026, payment rate is declining (~25% vs.\u00a050% in 2020). Several factors incentivize not paying: French government official position, growing immutable backup quality, disclosure risk maintained even after payment, OFAC sanctions on certain groups. Ransom represents only 5-15% of total ransomware loss cost. Good preparation (immutable backups, response plan, cyber insurance) generally enables rebuilding without paying.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>Does cyber insurance really pay the ransom?<\/strong> Yes, under strict conditions. The contract must include cyber extortion coverage (sometimes optional). Payment must be validated by insurer and its agreed negotiator. OFAC sanctions clause applies: if attacker on SDN List, payment is illegal and not covered. In practice, the insurer often recommends not paying and covers reconstruction costs. When payment occurs, it goes through regulated channels (cryptocurrencies from agreed exchanges).<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>How much does a ransomware incident cost on average?<\/strong> Per IBM Cost of a Data Breach 2024 and ANSSI, the average total cost for a French mid-cap is EUR 4.17M. Breakdown: business interruption 45-55%, forensic and reconstruction 25-35%, GDPR legal fees 8-12%, crisis communication 5-8%, ransom (if paid) 5-15%. Real cost depends strongly on preparation quality and response speed. A well-prepared company can limit cost to EUR 1-2M.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>How much does cyber insurance covering ransomware cost?<\/strong> Orders of magnitude 2026 for a mid-cap French operation: EUR 25,000-80,000 annual premium for EUR 5-10M limit covering complete ransomware loss. Premium varies by risk profile, cybersecurity disposition quality, claims history, sector. A French subsidiary mature in cybersecurity (generalized MFA, EDR, immutable backups, annual training) obtains 25-40% better conditions.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>What technical pre-requisites do insurers require?<\/strong> Minimum 2026 floor: generalized MFA on remote and privileged access, EDR or next-generation antivirus, immutable backups (offline or isolated cloud), documented incident response plan tested annually, annual phishing training with exercises, privileged account management (PAM), documented patch management. Without this floor, insurers refuse or require dissuasive deductibles and exclusions. A preliminary cyber audit has become standard for mid-caps.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>What to do in the first hours after ransomware detection?<\/strong> Six actions in parallel in the first 6 hours: 1) activate internal crisis cell, 2) isolate compromised systems without shutting them down, 3) preserve evidence (logs, memory), 4) contact insurer\u2019s cyber hotline, 5) do not attempt autonomous negotiation, 6) prepare initial communication. Declaration speed largely conditions the loss outcome. Late declaration over 48 hours can trigger coverage restrictions.<\/p>\r\n\r\n\r\n\r\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">About the author: Jean-Georges NANOT<\/h2>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Jean-Georges NANOT is consulting broker and founder of CBE Consulting, an insurance broking firm based in France specialized in international risk management. He advises French ETIs with international activity and foreign-headquartered subsidiaries in France on insurance program structuring, risk audits, and claims management.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">ORIAS no. 15000172 LinkedIn: [to be completed] <a href=\"\/en\/jean-georges-nanot\/\">View all articles by this author<\/a><\/p>\r\n\r\n\r\n\r\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">About this article<\/h2>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">This article was written by Jean-Georges NANOT to provide expert insight on the topic discussed. The information presented is of a general nature and does not replace a personalized audit. Each situation requires specific analysis of your risk exposure. For an assessment adapted to your company, contact <a href=\"\/en\/#contact\">our team<\/a>.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">CBE Consulting, Cap de Bonne-Esp\u00e9rance Consulting, insurance broker. ORIAS no. 15000172 Supervisory authority: ACPR, 4 place de Budapest, 75009 Paris, France.<\/p>\r\n\r\n\r\n\r\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">Sources and references<\/h2>\r\n\r\n\r\n\r\n<ul class=\"wp-block-list\">\r\n<li>ANSSI, Panorama de la cybermenace 2024 and 2025<\/li>\r\n<li>Cybermalveillance.gouv.fr<\/li>\r\n<li>IBM Cost of a Data Breach Report 2024<\/li>\r\n<li>Mandiant M-Trends 2024<\/li>\r\n<li>ENISA Threat Landscape 2024<\/li>\r\n<li>OFAC SDN List<\/li>\r\n<li>CNIL, GDPR recommendations<\/li>\r\n<li>Coveware, Ransomware Quarterly Report<\/li>\r\n<li>ACPR<\/li>\r\n<\/ul>\r\n\r\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Ransomware cyber insurance in France: real coverage, exclusions, sublimits, ransom payment. CBE Consulting, ORIAS 15000172.<\/p>\n","protected":false},"author":1,"featured_media":65751,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[129],"tags":[],"class_list":["post-65613","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog-en-2"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Ransomware in France: what your cyber policy actually covers (and excludes) | CBE Consulting<\/title>\n<meta name=\"description\" content=\"Ransomware cyber insurance in France: real coverage, exclusions, sublimits, ransom payment. CBE Consulting, ORIAS 15000172.\" \/>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ransomware in France: what your cyber policy actually covers (and excludes) | CBE Consulting\" \/>\n<meta property=\"og:description\" content=\"Ransomware cyber insurance in France: real coverage, exclusions, sublimits, ransom payment. CBE Consulting, ORIAS 15000172.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cbeconsulting.fr\/en\/ransomware-cyber-coverage-french-subsidiaries\/\" \/>\n<meta property=\"og:site_name\" content=\"CBE CONSULTING\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-15T07:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-22T00:13:32+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.cbeconsulting.fr\/wp-content\/uploads\/2026\/07\/assurance-entreprise-internationale.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1536\" \/>\n\t<meta property=\"og:image:height\" content=\"1024\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"adminPeach\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"adminPeach\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"12 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/ransomware-cyber-coverage-french-subsidiaries\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/ransomware-cyber-coverage-french-subsidiaries\\\/\"},\"author\":{\"name\":\"adminPeach\",\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/#\\\/schema\\\/person\\\/bebdf6450a191e6802f76280e9bddf77\"},\"headline\":\"Ransomware in France: what your cyber policy actually covers (and excludes)\",\"datePublished\":\"2026-10-15T07:00:00+00:00\",\"dateModified\":\"2026-10-22T00:13:32+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/ransomware-cyber-coverage-french-subsidiaries\\\/\"},\"wordCount\":2349,\"publisher\":{\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/ransomware-cyber-coverage-french-subsidiaries\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/ransomware-insurance-cover-exclusions.webp\",\"articleSection\":[\"Blog\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/ransomware-cyber-coverage-french-subsidiaries\\\/\",\"url\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/ransomware-cyber-coverage-french-subsidiaries\\\/\",\"name\":\"Ransomware in France: what your cyber policy actually covers (and excludes) | CBE Consulting\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/ransomware-cyber-coverage-french-subsidiaries\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/ransomware-cyber-coverage-french-subsidiaries\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/ransomware-insurance-cover-exclusions.webp\",\"datePublished\":\"2026-10-15T07:00:00+00:00\",\"dateModified\":\"2026-10-22T00:13:32+00:00\",\"description\":\"Ransomware cyber insurance in France: real coverage, exclusions, sublimits, ransom payment. CBE Consulting, ORIAS 15000172.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/ransomware-cyber-coverage-french-subsidiaries\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/ransomware-cyber-coverage-french-subsidiaries\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/ransomware-cyber-coverage-french-subsidiaries\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/ransomware-insurance-cover-exclusions.webp\",\"contentUrl\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/ransomware-insurance-cover-exclusions.webp\",\"width\":1200,\"height\":800},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/ransomware-cyber-coverage-french-subsidiaries\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ransomware in France: what your cyber policy actually covers (and excludes)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/\",\"name\":\"CBE CONSULTING\",\"description\":\"Un site utilisant WordPress\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/#organization\",\"name\":\"CBE CONSULTING\",\"url\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/wp-content\\\/uploads\\\/2022\\\/02\\\/logo-cbe.svg\",\"contentUrl\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/wp-content\\\/uploads\\\/2022\\\/02\\\/logo-cbe.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"CBE CONSULTING\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.cbeconsulting.fr\\\/en\\\/#\\\/schema\\\/person\\\/bebdf6450a191e6802f76280e9bddf77\",\"name\":\"adminPeach\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3905db89a17e93eb72286aa759f313b3560bb95d97c743d29d7d0dd2e136e04d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3905db89a17e93eb72286aa759f313b3560bb95d97c743d29d7d0dd2e136e04d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3905db89a17e93eb72286aa759f313b3560bb95d97c743d29d7d0dd2e136e04d?s=96&d=mm&r=g\",\"caption\":\"adminPeach\"},\"sameAs\":[\"https:\\\/\\\/www.cbeconsulting.fr\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ransomware in France: what your cyber policy actually covers (and excludes) | CBE Consulting","description":"Ransomware cyber insurance in France: real coverage, exclusions, sublimits, ransom payment. CBE Consulting, ORIAS 15000172.","robots":{"index":"noindex","follow":"follow"},"og_locale":"en_US","og_type":"article","og_title":"Ransomware in France: what your cyber policy actually covers (and excludes) | CBE Consulting","og_description":"Ransomware cyber insurance in France: real coverage, exclusions, sublimits, ransom payment. CBE Consulting, ORIAS 15000172.","og_url":"https:\/\/www.cbeconsulting.fr\/en\/ransomware-cyber-coverage-french-subsidiaries\/","og_site_name":"CBE CONSULTING","article_published_time":"2026-10-15T07:00:00+00:00","article_modified_time":"2026-10-22T00:13:32+00:00","og_image":[{"width":1536,"height":1024,"url":"https:\/\/www.cbeconsulting.fr\/wp-content\/uploads\/2026\/07\/assurance-entreprise-internationale.webp","type":"image\/webp"}],"author":"adminPeach","twitter_card":"summary_large_image","twitter_misc":{"Written by":"adminPeach","Est. reading time":"12 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.cbeconsulting.fr\/en\/ransomware-cyber-coverage-french-subsidiaries\/#article","isPartOf":{"@id":"https:\/\/www.cbeconsulting.fr\/en\/ransomware-cyber-coverage-french-subsidiaries\/"},"author":{"name":"adminPeach","@id":"https:\/\/www.cbeconsulting.fr\/en\/#\/schema\/person\/bebdf6450a191e6802f76280e9bddf77"},"headline":"Ransomware in France: what your cyber policy actually covers (and excludes)","datePublished":"2026-10-15T07:00:00+00:00","dateModified":"2026-10-22T00:13:32+00:00","mainEntityOfPage":{"@id":"https:\/\/www.cbeconsulting.fr\/en\/ransomware-cyber-coverage-french-subsidiaries\/"},"wordCount":2349,"publisher":{"@id":"https:\/\/www.cbeconsulting.fr\/en\/#organization"},"image":{"@id":"https:\/\/www.cbeconsulting.fr\/en\/ransomware-cyber-coverage-french-subsidiaries\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cbeconsulting.fr\/wp-content\/uploads\/2026\/08\/ransomware-insurance-cover-exclusions.webp","articleSection":["Blog"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.cbeconsulting.fr\/en\/ransomware-cyber-coverage-french-subsidiaries\/","url":"https:\/\/www.cbeconsulting.fr\/en\/ransomware-cyber-coverage-french-subsidiaries\/","name":"Ransomware in France: what your cyber policy actually covers (and excludes) | CBE Consulting","isPartOf":{"@id":"https:\/\/www.cbeconsulting.fr\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.cbeconsulting.fr\/en\/ransomware-cyber-coverage-french-subsidiaries\/#primaryimage"},"image":{"@id":"https:\/\/www.cbeconsulting.fr\/en\/ransomware-cyber-coverage-french-subsidiaries\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cbeconsulting.fr\/wp-content\/uploads\/2026\/08\/ransomware-insurance-cover-exclusions.webp","datePublished":"2026-10-15T07:00:00+00:00","dateModified":"2026-10-22T00:13:32+00:00","description":"Ransomware cyber insurance in France: real coverage, exclusions, sublimits, ransom payment. CBE Consulting, ORIAS 15000172.","breadcrumb":{"@id":"https:\/\/www.cbeconsulting.fr\/en\/ransomware-cyber-coverage-french-subsidiaries\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.cbeconsulting.fr\/en\/ransomware-cyber-coverage-french-subsidiaries\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cbeconsulting.fr\/en\/ransomware-cyber-coverage-french-subsidiaries\/#primaryimage","url":"https:\/\/www.cbeconsulting.fr\/wp-content\/uploads\/2026\/08\/ransomware-insurance-cover-exclusions.webp","contentUrl":"https:\/\/www.cbeconsulting.fr\/wp-content\/uploads\/2026\/08\/ransomware-insurance-cover-exclusions.webp","width":1200,"height":800},{"@type":"BreadcrumbList","@id":"https:\/\/www.cbeconsulting.fr\/en\/ransomware-cyber-coverage-french-subsidiaries\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.cbeconsulting.fr\/en\/"},{"@type":"ListItem","position":2,"name":"Ransomware in France: what your cyber policy actually covers (and excludes)"}]},{"@type":"WebSite","@id":"https:\/\/www.cbeconsulting.fr\/en\/#website","url":"https:\/\/www.cbeconsulting.fr\/en\/","name":"CBE CONSULTING","description":"Un site utilisant WordPress","publisher":{"@id":"https:\/\/www.cbeconsulting.fr\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.cbeconsulting.fr\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.cbeconsulting.fr\/en\/#organization","name":"CBE CONSULTING","url":"https:\/\/www.cbeconsulting.fr\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cbeconsulting.fr\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.cbeconsulting.fr\/wp-content\/uploads\/2022\/02\/logo-cbe.svg","contentUrl":"https:\/\/www.cbeconsulting.fr\/wp-content\/uploads\/2022\/02\/logo-cbe.svg","width":"1024","height":"1024","caption":"CBE CONSULTING"},"image":{"@id":"https:\/\/www.cbeconsulting.fr\/en\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.cbeconsulting.fr\/en\/#\/schema\/person\/bebdf6450a191e6802f76280e9bddf77","name":"adminPeach","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/3905db89a17e93eb72286aa759f313b3560bb95d97c743d29d7d0dd2e136e04d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/3905db89a17e93eb72286aa759f313b3560bb95d97c743d29d7d0dd2e136e04d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3905db89a17e93eb72286aa759f313b3560bb95d97c743d29d7d0dd2e136e04d?s=96&d=mm&r=g","caption":"adminPeach"},"sameAs":["https:\/\/www.cbeconsulting.fr"]}]}},"_links":{"self":[{"href":"https:\/\/www.cbeconsulting.fr\/en\/wp-json\/wp\/v2\/posts\/65613","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cbeconsulting.fr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cbeconsulting.fr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cbeconsulting.fr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cbeconsulting.fr\/en\/wp-json\/wp\/v2\/comments?post=65613"}],"version-history":[{"count":1,"href":"https:\/\/www.cbeconsulting.fr\/en\/wp-json\/wp\/v2\/posts\/65613\/revisions"}],"predecessor-version":[{"id":65680,"href":"https:\/\/www.cbeconsulting.fr\/en\/wp-json\/wp\/v2\/posts\/65613\/revisions\/65680"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cbeconsulting.fr\/en\/wp-json\/wp\/v2\/media\/65751"}],"wp:attachment":[{"href":"https:\/\/www.cbeconsulting.fr\/en\/wp-json\/wp\/v2\/media?parent=65613"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cbeconsulting.fr\/en\/wp-json\/wp\/v2\/categories?post=65613"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cbeconsulting.fr\/en\/wp-json\/wp\/v2\/tags?post=65613"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}