EU Agency Releases Report on Governmental Cloud Computing Security in EU

The main goal of the report is to support governmental bodies in taking informed, risk-based decisions regarding security of data, resilience of service and legal compliance on their way to the cloud.

The EU's cybersecurity agency, ENISA, has launched a new report on governmental cloud computing that targets at senior managers of public bodies who have to make a security and resilience decision about how to “go cloud,” if at all. The main goal of the report is to support governmental bodies in taking informed, risk-based decisions regarding security of data, resilience of service and legal compliance on their way to the cloud. It also highlights security and resilience pros and cons of community, private and public cloud computing services for public bodies.

"The new report presents a decision-making model for senior management to determine the best cloud solution from a security and resilience point of view,” said Daniele Catteddu, author of the report, which details and explains the different steps of the decision-making model, and applies the model to four sample services (electronic healthcare services, electronic administrative procedures, e-mail and human resources applications). Analysis and conclusions are mainly based on three scenarios, which describe the migration to cloud computing of a healthcare authority, a local public administration and the creation of governmental cloud infrastructure.

The Agency concludes that private and community clouds appear to be the solutions that best fit the needs of public administrations if they need to achieve the highest level of data governance. If a private or community cloud infrastructure does not reach the necessary critical mass, most of the resilience and security benefits of the cloud model will not be realized.

The executive director, professor Udo Helmbrech, said, "Public cloud offers a very high level of service availability, and is the most cost-effective. Yet, currently its adoption should be limited to non-sensitive or non critical applications, in the context of a well-defined cloud adaptation strategy with a clear exit strategy."

The report makes several recommendations to governments and public bodies, including:

National governments and the EU institutions should investigate the concept of an EU Governmental cloud.
Cloud computing will soon serve a significant portion of EU citizens, SMEs and public administrations. National governments should thus prepare a cloud computing strategy and study the role that cloud computing will play for critical information infrastructure protection (CIIP).
A national cloud computing strategy should address the effects of national/supra-national interoperability and interdependencies, cascading failures, and include cloud providers into the reporting schemes of articles 4 and 13 of the new Telecom Framework Directive


Featured

  • Maximizing Your Security Budget This Year

    The Importance of Proactive Security Measures: 4 Stories of Regret

    We all want to believe that crime won’t happen to us. So, some business owners hope for the best and put proactive security measures on the back burner, because other things like growth, attracting new customers, and meeting deadlines all seem more pressing. Read Now

  • New Uses for AI

    New applications of AI in IP cameras are delivering precise detection, robust search capabilities, elevated data analysis and enhanced image quality. When combined with built-in analytics, AI can help streamline forensic investigations and also supports several mission-critical business functions. Read Now

  • The Critical Missing Piece

    As technology advances, security programs have invested heavily in advanced systems and sensors. These sensors generate massive amounts of data, often overwhelming the security teams tasked with monitoring them. AI technology promises to sift through this data, using logic and reasoning to differentiate potential threats from non-threats. Read Now

  • Computers Beginning to Come Back Online After CrowdStrike Caused Crash Friday

    Computers around the world are beginning to come back online after a defective update to Windows machines from cybersecurity provider CrowdStrike Friday affected almost 9 million machines. Read Now

Featured Cybersecurity

Webinars

New Products

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities 3

  • EasyGate SPT and SPD

    EasyGate SPT SPD

    Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles. 3

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions. 3