Question 1

What is the DIC(T) model?

Accepted Answer

DIC(T) is a standard impact assessment framework in cybersecurity. It analyzes an incident along four axes: Availability (access to services), Integrity (data reliability), Confidentiality (data exposure) and Traceability (ability to understand what happened). The T is in parentheses because traceability is sometimes considered a complementary criterion depending on the framework.

Question 2

In what context should I use this tool?

Accepted Answer

This tool is suited to the initial qualification of a security incident, writing an impact report for management or the DPO, and deciding whether to activate business continuity plans (BCP/DRP). It structures the analysis without replacing the analyst's judgment.

Question 3

Can the PDF report be used as an official document?

Accepted Answer

The generated PDF report is a decision-support and internal traceability document. It includes scores per criterion, the overall score and contextual recommendations. It can serve as a basis for a CNIL notification or a crisis report, but must be completed and validated by the responsible analyst.