Agenda

Workshop on Cloud Computing Certification Schemes

Date

11 December 2017

Venue

DG CONNECT. Av. Beaulieu 25, Brussels. Room S1

Time

-

Price

Free

The main purpose of this workshop is to provide the means to offer cloud users reassurance that their data is equally safe no matter who the cloud service provider (CSP) is or in which Member State its infrastructure is located.

The workshop will be held in Brussels where relevant stakeholders will meet in order to discuss the main findings as well as to put forward recommendations to be applied in Europe.

Its goal is twofold: on one hand, it sets out to present the main findings, along with the current work in progress and the following steps of the study led by TECNALIA, and, on the other hand, it aims to gather feedback on the results from all attendees through participative sessions.

This workshop is part of the Free Flow of Data Initiative, in which the European Commission has launched a series of studies. They include a study on Cloud Security Certification Schemes, which is on-going and is led by TECNALIA.

The agenda of the workshop is shown below. After the event, please click on the names to see the corresponding presentations.

Time Topic
09:30 Registration and Welcome Coffee
10:00-10:15 Opening and Welcome
Presentation of Unit E2 and scope of the study on “Cloud Computing Certification Schemes”
► Luis Carlos Busquets Perez (European Commission)
10:15-10:45 Presentation of the main findings: Where is the EU in cloud security certification?
► Leire Orue-Echevarria (TECNALIA) - Presentation
► Linda Strick (Fraunhofer, coordinator of EU-SEC) - Presentation
 
10:45-11:15 Challenges in the landscape of cloud security certification at EU level – Where are we going?
► Maite Álvarez (TECNALIA) - Presentation
► Patrick Gerte (BSI) - Presentation
11:15-11:30 Coffe Break 
11:30-12:00 What should an EU-wide cloud security certification scheme cover?
► Concepción Cortés (TECNALIA) - Presentation
► Dimitra Liveri (ENISA) - Presentation
► Domenico Ferrara (DG CONNECT (H1)) - Presentation
12:00-12:20 The point of view of Cloud Service Consumers (CSC): what are CSCs looking for when contracting a CSP in terms of security? The experience of a medium-large CSC (tbc)
 
12:20-12:40 The point of view of Cloud Service Providers (CSP): what are the benefits of being certified? What are the challenges involved in obtaining certification? What impact would an EU certification scheme have on their market share? The experience of a medium-sized CSP.
► Helmut Fallmann (Fabasoft)
12:40-13:00 Explanation of the dynamics of the afternoon world coffee sessionsThe world coffee tables will include the following topics:

  1. Validation of the mapping of the security certification schemes.
  2. Basic requirements and security controls that a certification scheme must cover.
  3. Adoption of cloud security certification schemes with examples and practical experiences. Participants will move from table to table in the different sessions in order to look at all options and all points of view.
13:00- 14:00 Networking Lunch
14:00-14:30 World café Table Session 1Moderated by TECNALIA
14:30-15:00 World café Table Session 2 – Moderated by TECNALIA
15:15-15:30 Coffee Break
15:30-16:00 World café Table session 3 Moderated by TECNALIA
16:00-16:30 Presentation of the results of the Cafe Tables
16:30-16:45 Concluding Remarks and Closure of the Workshop (TECNALIA)