Agenda

      Workshop on Cloud Computing Certification Schemes

      Date

      11 December 2017

      Venue

      DG CONNECT. Av. Beaulieu 25, Brussels. Room S1

      Time

      -

      Price

      Free

      The main purpose of this workshop is to provide the means to offer cloud users reassurance that their data is equally safe no matter who the cloud service provider (CSP) is or in which Member State its infrastructure is located.

      The workshop will be held in Brussels where relevant stakeholders will meet in order to discuss the main findings as well as to put forward recommendations to be applied in Europe.

      Its goal is twofold: on one hand, it sets out to present the main findings, along with the current work in progress and the following steps of the study led by TECNALIA, and, on the other hand, it aims to gather feedback on the results from all attendees through participative sessions.

      This workshop is part of the Free Flow of Data Initiative, in which the European Commission has launched a series of studies. They include a study on Cloud Security Certification Schemes, which is on-going and is led by TECNALIA.

      The agenda of the workshop is shown below. After the event, please click on the names to see the corresponding presentations.

      Time Topic
      09:30 Registration and Welcome Coffee
      10:00-10:15 Opening and Welcome
      Presentation of Unit E2 and scope of the study on “Cloud Computing Certification Schemes”
      ► Luis Carlos Busquets Perez (European Commission)
      10:15-10:45 Presentation of the main findings: Where is the EU in cloud security certification?
      ► Leire Orue-Echevarria (TECNALIA) - Presentation
      ► Linda Strick (Fraunhofer, coordinator of EU-SEC) - Presentation
       
      10:45-11:15 Challenges in the landscape of cloud security certification at EU level – Where are we going?
      ► Maite Álvarez (TECNALIA) - Presentation
      ► Patrick Gerte (BSI) - Presentation
      11:15-11:30 Coffe Break 
      11:30-12:00 What should an EU-wide cloud security certification scheme cover?
      ► Concepción Cortés (TECNALIA) - Presentation
      ► Dimitra Liveri (ENISA) - Presentation
      ► Domenico Ferrara (DG CONNECT (H1)) - Presentation
      12:00-12:20 The point of view of Cloud Service Consumers (CSC): what are CSCs looking for when contracting a CSP in terms of security? The experience of a medium-large CSC (tbc)
       
      12:20-12:40 The point of view of Cloud Service Providers (CSP): what are the benefits of being certified? What are the challenges involved in obtaining certification? What impact would an EU certification scheme have on their market share? The experience of a medium-sized CSP.
      ► Helmut Fallmann (Fabasoft)
      12:40-13:00 Explanation of the dynamics of the afternoon world coffee sessionsThe world coffee tables will include the following topics:

      1. Validation of the mapping of the security certification schemes.
      2. Basic requirements and security controls that a certification scheme must cover.
      3. Adoption of cloud security certification schemes with examples and practical experiences. Participants will move from table to table in the different sessions in order to look at all options and all points of view.
      13:00- 14:00 Networking Lunch
      14:00-14:30 World café Table Session 1Moderated by TECNALIA
      14:30-15:00 World café Table Session 2 – Moderated by TECNALIA
      15:15-15:30 Coffee Break
      15:30-16:00 World café Table session 3 Moderated by TECNALIA
      16:00-16:30 Presentation of the results of the Cafe Tables
      16:30-16:45 Concluding Remarks and Closure of the Workshop (TECNALIA)