Workshop: Certification & Testing recommendation for Cloud standard compliance

1. Workshop: Certification & Testing recommendation for Cloud standard compliance

2. AGENDA • CloudWatch Intro – Daniele Catteddu / CSA • Workshop objectives - Daniele Catteddu / CSA • European Cloud Computing Strategy - Tjabbe Bos / EC • Certifying Information Security in the Cloud - Tom Nicholls / BSI • FitSM: lightweight standards for service management in federated cloud - Owen Appleton / Emergence Tech Limited • Open discussion

3. A European cloud observatory supporting cloud policies, standard profiles and services Daniele Catteddu – Managing Director EMEA, Cloud Security Alliance

4. Driving the uptake of cloud in Europe The cloud way is the smart way…… …….but it needs to be secure, fair and interoperable. Accelerating and increase the use of cloud computing across the public and private sectors in Europe Supporting international efforts on interoperability and portability Multi stakeholder dialogue to increase commitment Transparency Openness Compliance

6. Our PartnershipOur Network

7. Building on support Setting out the right way Insights from thought-leaders Benefits Best practices Big issues Strong support Wide community

8. Meet us at...

9. Tell us about what you’re doing in the cloud www.cloudwatchHUB.eu https://twitter.com/CloudWatchHub http://linkd.in/1eLoBjl info@cloudwatchhub.eu

11. Workshop Objectives

12. Purpose of this workshop • This workshop aims at defining principles and specifications for the creation of an open schema to certify organisations and services against existing Cloud requirements and technical Cloud profiles. • Collect valid input to develop Deliverable 4.1) Cloud certification and recommendation guidelines

13. HOW? • Discuss with expert the state of the art in security certification for cloud computing both from the technical and policy perspective • Understand the needs of our audience w.r.t. cloud security certification and testing • The workshop will be based on existing material, existing cloud specific certification schema, and under development and cloud specific certification schemas.

14. Input for the Open discussion

15. Certification SIG questionnaire • Background: the Selected Industry Group (SIG) certification expert group supports the EC in implementing action 1 of the Europe Cloud Strategy. • The SIG-certification agreed that the group will produce a list of security certification requirements and schemes which are fit-for-purpose to certify cloud computing services. • The SIG-certification decided to launch a survey. • Prepared by CSA/ENISA, reviewed by the SIG members and EC • Online since 25-MAR-2013 at https://www.surveymonkey.com/s/MM8DXG2 • Reporting data where captured by 13-APR-2013

16. Online Survey - Objectives

17. Online Survey - Features

18. What are the most important high-level objectives for a certification scheme?

19. What are the most important high-level objectives for a certification scheme?

20. What are the most important high-level objectives for a certification scheme?

21. What are the most important high-level objectives for a certification scheme?

22. Additional information on the certification, accreditation and certification scheme features: