{"id":33727,"date":"2022-12-21T05:59:14","date_gmt":"2022-12-21T05:59:14","guid":{"rendered":"https:\/\/www.carmatec.com\/?p=33727"},"modified":"2026-07-14T14:02:00","modified_gmt":"2026-07-14T14:02:00","slug":"comment-proteger-les-actifs-numeriques-de-votre-entreprise","status":"publish","type":"post","link":"https:\/\/www.carmatec.com\/fr_fr\/blog\/how-to-protect-your-businesss-digital-assets\/","title":{"rendered":"Comment prot\u00e9ger les actifs num\u00e9riques de votre entreprise en 2026 ?"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"33727\" class=\"elementor elementor-33727\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-87820f2 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"87820f2\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-bb304a9\" data-id=\"bb304a9\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f3b0d50 elementor-widget elementor-widget-text-editor\" data-id=\"f3b0d50\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><b>Assez souvent <\/b><span style=\"font-weight: 400;\">\u00a0we come across businesses especially Start-ups and SMEs who have no control over their digital assets. Purely because it was created by an employee whose no longer with the organization, or was not handed over back to the company\u2019s digital silo, causing an impact on time, costs and control for the business , and at times posing bottlenecks during very crucial situations when a change is needed. For business, time is money and anything that may make you lose time, in effect is CRITICAL. The motivation and purpose of writing this article, is driven from this need,\u00a0 to define a \u201cHygiene Checklist for Managing Digital Assets\u201d , so that you as a business do not\u00a0 make the same mistake and can be better equipped\u00a0 for the same.<\/span><\/p><p><span style=\"font-weight: 400;\">Since the context of Digital Assets can be huge, let me stick to the ones that pertain to the web and mobile applications that you run,\u00a0 and lets keep aside any other digital assets for the time being such as IT assets, digital physical assets etc.\u00a0<\/span><\/p><p><b>Quels sont les actifs num\u00e9riques utilis\u00e9s par les applications Web et quelle est la meilleure fa\u00e7on d\u2019en g\u00e9rer la propri\u00e9t\u00e9. Quelles sont les questions que vous devez savoir en tant que propri\u00e9taire d&#039;entreprise lorsque vous poss\u00e9dez ces actifs num\u00e9riques, et quelles sont les choses \u00e0 faire et \u00e0 ne pas faire ici.<\/b><\/p><ul><li aria-level=\"1\"><b>H\u00e9bergement et DNS<\/b><\/li><\/ul><p><span style=\"font-weight: 400;\">Your app can be hosted in a shared hosting environment like GoDaddy, or a dedicated <a href=\"https:\/\/contabo.com\/en\/vps\/\" target=\"_blank\" rel=\"noopener\">affordable VPS hosting<\/a><\/span> like Contabo, DigitalOcean or Linode, or a cloud environment like AWS Ec2 or Azure. Whichever environment it is, its important that the ROOT account of hosting is under the ownership of a common business email, with 2-factor authentication linked to a mobile number that belongs to the business.\u00a0 The stakeholders of the business should get ALL notifications from the hosting account at all times, because if there are billing failures for consecutive 3 months your account can be terminated, or the data deleted and its a HUGE risk. Basically the email configured here has to be MONITORED at all times, and the data is too critical if you fail to do so.<\/p><p><span style=\"font-weight: 400;\">Et tout aussi important que le contr\u00f4le de l'h\u00e9bergement, est le contr\u00f4le du DNS ou du fournisseur de nom de domaine (qui peut \u00eatre GoDaddy,\u00a0<\/span><a href=\"https:\/\/www.atom.com\/\">une plate-forme de nommage de domaines bien connue<\/a>, Mercaba or any others). The primary account with the domain registrar must be under the common business email, including the mobile number linked to it for 2-factor auth. The notifications for expiry of domain names must be set correctly so that you get timely alerts,\u00a0 and has to be tracked to avoid unexpected downtimes or outages.<\/p><ul><li aria-level=\"1\"><b>Votre application Web et vos interfaces API\u00a0<\/b><\/li><\/ul><p><b>L&#039;application Web sera dans votre environnement d&#039;h\u00e9bergement mais il est important de le savoir<\/b><\/p><ol><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Combien d&#039;instances ex\u00e9cutez-vous et \u00eates-vous factur\u00e9\u00a0?<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Quelle est la pile technique ex\u00e9cut\u00e9e par chaque instance, par exemple si elle est <a href=\"https:\/\/www.carmatec.com\/fr_fr\/societe-de-developpement-php\/\">PHP<\/a> ou <a href=\"https:\/\/www.carmatec.com\/fr_fr\/embaucher-des-developpeurs\/embaucher-un-developpeur-nodejs\/\">N\u0153ud<\/a> ou <a href=\"https:\/\/www.carmatec.com\/fr_fr\/developpement-de-reaction\/\">R\u00e9agir<\/a> ou une combinaison de pile pour le backend et le frontend.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">O\u00f9 est h\u00e9berg\u00e9e la base de donn\u00e9es et combien de bases de donn\u00e9es ex\u00e9cutez-vous.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Quelles sont les int\u00e9grations tierces pour l&#039;application et contr\u00f4lez-vous les comptes utilis\u00e9s pour chacune d&#039;entre elles ?<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">L&#039;application utilise-t-elle d&#039;autres services comme Elastic Search, S3 ou tout autre service qui est factur\u00e9\/factur\u00e9 en plus et sur quelle base est-il factur\u00e9 ?\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Plus important encore, qui a acc\u00e8s \u00e0 l&#039;environnement d&#039;h\u00e9bergement, comment est-il contr\u00f4l\u00e9 et quel est le processus utilis\u00e9 pour accorder\/r\u00e9voquer l&#039;acc\u00e8s. Id\u00e9alement, vous ne devriez JAMAIS partager la connexion du compte root, le meilleur moyen est d&#039;ajouter des utilisateurs\/de les inviter \u00e0 utiliser le compte en tant que type d&#039;utilisateur sp\u00e9cifique en fonction du niveau d&#039;acc\u00e8s requis. Ou donnez un acc\u00e8s \u00e0 un niveau ssh ou sp\u00e9cifique pour le travail \u00e0 effectuer.<\/span><\/li><\/ol><div>\u00a0<\/div><ul><li aria-level=\"1\"><b>Base de code des applications Web<\/b><\/li><\/ul><p><span style=\"font-weight: 400;\">C&#039;est important chaque fois que vous ex\u00e9cutez un site Web ou <a href=\"https:\/\/www.carmatec.com\/fr_fr\/societe-de-developpement-dapplications-mobiles\/\">application mobile<\/a> que vous disposez d&#039;un compte de r\u00e9f\u00e9rentiel de code source g\u00e9r\u00e9 pour votre entreprise, que ce soit <a href=\"https:\/\/github.com\/\">GitHub<\/a> ou Bitbucket ou des services similaires. L&#039;e-mail utilis\u00e9 pour cr\u00e9er le compte DOIT appartenir \u00e0 l&#039;entreprise, et pour chaque projet, le niveau d&#039;acc\u00e8s requis peut \u00eatre accord\u00e9 aux d\u00e9veloppeurs. Il doit y avoir un processus pour ajouter\/r\u00e9voquer des utilisateurs en fonction des entr\u00e9es\/sorties des projets. Et il est \u00e9galement possible de donner un acc\u00e8s en lecture \u00e0 quelqu&#039;un pour visualiser le code, si vous souhaitez travailler avec une nouvelle soci\u00e9t\u00e9 de d\u00e9veloppement et lui donner l&#039;acc\u00e8s pour v\u00e9rifier le code.<\/span><\/p><p><span style=\"font-weight: 400;\">Pour une protection suppl\u00e9mentaire, il est bon d&#039;ajouter une couche de protection suppl\u00e9mentaire pour la branche principale\/ma\u00eetre qui contient le code de production, de sorte qu&#039;elle n\u00e9cessite l&#039;approbation pour toute fusion de code dans cette branche et prot\u00e8ge la branche contre la suppression, etc. Si vous voyez des moyens de activez la protection des branches pour Git, vous obtiendrez de bonnes informations \u00e0 ce sujet.<\/span><\/p><ul><li aria-level=\"1\"><b>Int\u00e9grations tierces<\/b><\/li><\/ul><p><span style=\"font-weight: 400;\">De nos jours, la plupart des applications Web disposent de nombreuses int\u00e9grations tierces, les plus courantes \u00e9tant Google Maps, Google Analytics, les passerelles de paiement, les passerelles SMS pour la validation OTP, Mailchimp pour les abonnements \u00e0 la newsletter, etc. Il est important de s&#039;assurer que tous les comptes utilis\u00e9s par l&#039;entreprise proviennent de la messagerie professionnelle courante, avec une authentification \u00e0 2 facteurs li\u00e9e \u00e0 un num\u00e9ro de mobile appartenant \u00e0 l&#039;entreprise. S&#039;assurer \u00e9galement que toutes les cl\u00e9s API utilis\u00e9es pour l&#039;int\u00e9gration sont g\u00e9n\u00e9r\u00e9es avec le nom sp\u00e9cifique du projet et fournies \u00e0 l&#039;\u00e9quipe de d\u00e9veloppement\/int\u00e9gration. Ce sera un probl\u00e8me si vous autorisez les d\u00e9veloppeurs \u00e0 utiliser leurs comptes, \u00e0 cr\u00e9er ces informations d&#039;identification et \u00e0 en autoriser l&#039;utilisation, m\u00eame dans le cas d&#039;une carte Google ou d&#039;un service gratuit. \u00c0 un moment donn\u00e9, l&#039;entreprise devra passer aux comptes payants en fonction de l&#039;utilisation, et il sera alors difficile de changer ou de mettre \u00e0 niveau le compte de mani\u00e8re transparente.<\/span><\/p><ul><li aria-level=\"1\"><b>Google Analytics , Social Logins ou autres<\/b><\/li><\/ul><p><span style=\"font-weight: 400;\">Its good to always plan and integrate analytics on all digital assets you run, especially if its customer facing. And the business should own the Google Analytics account that you would\u00a0 be using, the same way the business should own all the social media accounts it uses for all its integrations.<\/span><\/p><ul><li aria-level=\"1\"><b>Sauvegardes et instantan\u00e9s<\/b><\/li><\/ul><p><span style=\"font-weight: 400;\">Bien que les sauvegardes et les instantan\u00e9s fassent partie de la strat\u00e9gie d&#039;h\u00e9bergement, selon le type d&#039;h\u00e9bergement, il est important de v\u00e9rifier si vous les disposez \u00e0 tout moment. Plateformes cloud comme <a href=\"https:\/\/www.carmatec.com\/fr_fr\/services-geres-aws\/\">AWS<\/a> et Azure, conservent des instantan\u00e9s, mais tous les fournisseurs d&#039;h\u00e9bergement ne maintiennent pas des sauvegardes de donn\u00e9es continues, et c&#039;est toujours une bonne strat\u00e9gie de maintenir des sauvegardes \u00e0 DISTANCE r\u00e9guli\u00e8res.<\/span><\/p><h3><b>Quand il s&#039;agit d&#039;applications mobiles<\/b><\/h3><ul><li aria-level=\"1\"><b>Identifiants PlayStore et Apple Store<\/b><\/li><\/ul><p><span style=\"font-weight: 400;\">These are credentials used by developers to publish the apps to the Google Play Store or Apple\u2019s App Store, and it\u00a0 has to be owned by the business, and not allow developers to use their own. That way you always have control over App analytics and updates, and you get notified of any deprecated versions and upgrades that maybe needed for the apps. The respective developers can be given access by invite only, to the projects they work on and nothing further is needed here.\u00a0<\/span><\/p><ul><li aria-level=\"1\"><b>Notifications push \u2013 Identifiants<\/b><\/li><\/ul><p><span style=\"font-weight: 400;\">La plupart des applications mobiles utilisent un service tiers pour les notifications push, par exemple Firebase ou autres. Quel que soit celui que vous utilisez, il est important d\u2019avoir le contr\u00f4le sur le compte utilis\u00e9 ici.<\/span><\/p><ul><li aria-level=\"1\"><b>Base de code d&#039;application mobile<\/b><\/li><\/ul><p><span style=\"font-weight: 400;\">Base de code d&#039;application mobile, tout comme <a href=\"https:\/\/www.carmatec.com\/fr_fr\/developpement-dapplications-web\/\">des applications Web<\/a> la base de code doit \u00eatre maintenue dans un outil de contr\u00f4le de version de code comme Git ou <a href=\"https:\/\/bitbucket.org\/\">BitBucket<\/a>. Les m\u00eames r\u00e8gles applicables \u00e0 la gestion du code Web s\u2019appliqueront ici \u00e9galement.\u00a0<\/span><\/p><p><b>In this era, we cannot take digital assets lightly as they are the lifeline of the business at all times, and its extremely important to understand how to protect and safeguard it at all times. The above is just a start, from a hygiene and must-do perspective and\u00a0 as we dig deeper there are further best practices and standards that can be followed. But the most important CHECK is to ensure that we have this in place to start with!<\/b><\/p><p><b>VOUS VOULEZ NOUS CONSULTER\u2026.<a href=\"https:\/\/www.carmatec.com\/fr_fr\/contactez-nous\/\">CONTACTEZ-NOUS<\/a> MAINTENANT!<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-897ed54 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"897ed54\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-1214836\" data-id=\"1214836\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6822b5e elementor-author-box--image-valign-middle elementor-author-box--avatar-yes elementor-author-box--name-yes elementor-author-box--biography-yes elementor-author-box--link-no elementor-widget elementor-widget-author-box\" data-id=\"6822b5e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"author-box.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-author-box\">\n\t\t\t\t\t\t\t<div  class=\"elementor-author-box__avatar\">\n\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/secure.gravatar.com\/avatar\/f17aee38975eefad8debf4e7d9551140f041007011aa1e1df397cb6c89be2b07?s=300&#038;d=mm&#038;r=g\" alt=\"Picture of Indu Aromal\" loading=\"lazy\">\n\t\t\t\t<\/div>\n\t\t\t\n\t\t\t<div class=\"elementor-author-box__text\">\n\t\t\t\t\t\t\t\t\t<div >\n\t\t\t\t\t\t<h4 class=\"elementor-author-box__name\">\n\t\t\t\t\t\t\tIndu Aromal\t\t\t\t\t\t<\/h4>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-author-box__bio\">\n\t\t\t\t\t\tIndu est un technocrate avec une exp\u00e9rience technologique diversifi\u00e9e. Elle se concentre fortement sur les probl\u00e8mes difficiles des clients en utilisant les technologies num\u00e9riques. Avec plus de 19 ans d&#039;exp\u00e9rience dans l&#039;innovation num\u00e9rique, le d\u00e9veloppement de produits, la strat\u00e9gie commerciale et la gestion d&#039;\u00e9quipe, elle parle de son exp\u00e9rience de travail avec des clients du monde entier.\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Quite often \u00a0we come across businesses especially Start-ups and SMEs who have no control over their digital assets. Purely because it was created by an employee whose no longer with the organization, or was not handed over back to the company\u2019s digital silo, causing an impact on time, costs and control for the business , [&hellip;]<\/p>\n","protected":false},"author":8,"featured_media":33742,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,10],"tags":[],"class_list":["post-33727","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-learn-technology"],"_links":{"self":[{"href":"https:\/\/www.carmatec.com\/fr_fr\/wp-json\/wp\/v2\/posts\/33727","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.carmatec.com\/fr_fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.carmatec.com\/fr_fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.carmatec.com\/fr_fr\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/www.carmatec.com\/fr_fr\/wp-json\/wp\/v2\/comments?post=33727"}],"version-history":[{"count":21,"href":"https:\/\/www.carmatec.com\/fr_fr\/wp-json\/wp\/v2\/posts\/33727\/revisions"}],"predecessor-version":[{"id":54743,"href":"https:\/\/www.carmatec.com\/fr_fr\/wp-json\/wp\/v2\/posts\/33727\/revisions\/54743"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.carmatec.com\/fr_fr\/wp-json\/wp\/v2\/media\/33742"}],"wp:attachment":[{"href":"https:\/\/www.carmatec.com\/fr_fr\/wp-json\/wp\/v2\/media?parent=33727"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.carmatec.com\/fr_fr\/wp-json\/wp\/v2\/categories?post=33727"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.carmatec.com\/fr_fr\/wp-json\/wp\/v2\/tags?post=33727"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}