On 24 June in Paris, Lauranne Peyron, Evolucare’s CISO and DPO, took part in the round-table discussion entitled ‘Building a security culture capable of thriving alongside AI’, organised as part of Security First Paris 2026.
Alongside Benoit Fuzeau (CASDEN Banque Populaire) and Gilles Garnier (Aéma Groupe), the discussions provided an opportunity to address an issue that has become central to all organisations: how can we develop a sustainable security culture at a time when artificial intelligence is transforming both usage patterns and threats?
When attackers exploit human behaviour
Cyberattacks no longer target information systems alone. They now exploit human instincts, habits and cognitive biases.
A sense of urgency, over-reliance on trust, authority or routine: these mechanisms are now widely used in phishing, social engineering and fraud campaigns.
The advent of generative AI further amplifies this reality. Fake messages are becoming more credible, impersonation attempts more sophisticated and deepfakes harder to detect.
In this context, cybersecurity can no longer rely solely on technology.
Moving beyond the logic of confrontation
This vision echoes a conviction held for several years by Lauranne Peyron at Evolucare.
During the APSSIS cybersecurity programme at SantExpo 2026, her presentation entitled ‘IS Security Awareness: A Combat Sport?’ had already called for a shift in perspective on security.
The aim is not to pit cybersecurity managers against staff, but to build a collective approach based on trust, active listening and support.
At Evolucare, this approach translates into regular engagement with teams, ongoing awareness-raising initiatives and a constant commitment to understanding business constraints before defining security measures.
Users aren’t the problem. They’re part of the solution.
AI: Ban or support it?
One of the key topics discussed at the round table was the rise of ‘Shadow AI’ – the use of generative AI tools outside the frameworks defined by the company.
The question is no longer whether such uses exist. They are already a reality in most organisations.
The challenge, therefore, is to support staff so that they understand not only the benefits but also the risks associated with these technologies: data privacy, verification of the information produced, and the role of humans in decision-making.
For whilst AI is a formidable support tool, it is no substitute for critical thinking or human responsibility.
Building a sustainable safety culture
For Evolucare, cybersecurity is, above all, a process of raising awareness and continuous improvement.
Training, listening, assessing, explaining and providing support enable us to develop a culture of security shared by all staff.
This approach is fully in line with the Group’s commitments to a safer, more responsible and more effective digital healthcare sector.
At a time when artificial intelligence is redefining digital practices, one thing remains certain: the first line of defence is still people, provided they are informed, supported and involved.