Security framework to achieve a continuous audit based certificationn in complia...
Security framework to achieve a continuous audit based certificationn in compliance with the EU wide cloud security certification scheme
Despite the evident benefits of cloud computing, its adoption is still limited partially because of EU customers’ perceived lack of security and transparency in this technology. Cloud service providers (CSPs) usually rely on secur...
ver más
¿Tienes un proyecto y buscas un partner? Gracias a nuestro motor inteligente podemos recomendarte los mejores socios y ponerte en contacto con ellos. Te lo explicamos en este video
Proyectos interesantes
CIRRUS
Certification InteRnationalisation and standaRdization in c...
779K€
Cerrado
CUSTODES
A Certification approach for dynamic, agile and reUSable ass...
6M€
Cerrado
EU-SEC
The European Security Certification Framework
4M€
Cerrado
SPECS
Secure Provisioning of Cloud Services based on SLA managemen...
3M€
Cerrado
TCLOUDS
Trustworthy Clouds Privacy and Resilience for Internet sca...
11M€
Cerrado
TRUESSEC.EU
TRUst Enhancing certified Solutions for SEcurity and protect...
1,000K€
Cerrado
Información proyecto MEDINA
Duración del proyecto: 39 meses
Fecha Inicio: 2020-07-20
Fecha Fin: 2023-10-31
Fecha límite de participación
Sin fecha límite de participación.
Descripción del proyecto
Despite the evident benefits of cloud computing, its adoption is still limited partially because of EU customers’ perceived lack of security and transparency in this technology. Cloud service providers (CSPs) usually rely on security certifications as a mean to improve transparency and trustworthiness, however European CSPs still face multiple challenges for certifying their services (e.g., fragmentation in the certification market, and lack of mutual recognition). In this context, the new EU Cybersecurity Act (EU CSA) proposes improving customer's trust in the European ICT market through a European certification scheme.
The proposed EU CSA’s cloud security certification scheme conveys new technological challenges due to its notion of levels of assurance (e.g., high-assurance through continuous certification for the whole supply chain), which need to be solved in order to bring all of EU CAS’s expected benefits to EU cloud providers and customers.
In this context, MEDINA proposes a framework for achieving a continuous audit-based certification for CSPs based on EU CSA’s scheme for cloud security certification. MEDINA will tackle challenges in areas like security validation/testing, machine-readable certification language, cloud security performance, and audit evidence management. The MEDINA consortium is composed of academic and industrial partners, which play key roles in the EU cloud security certification ecosystem (e.g., research, cloud providers/customers, and auditors). MEDINA will provide and empirically validate sustainable outcomes in order to benefit EU adopters.