EU Agency Releases Report on Governmental Cloud Computing Security in EU

The main goal of the report is to support governmental bodies in taking informed, risk-based decisions regarding security of data, resilience of service and legal compliance on their way to the cloud.

  • Feb 08, 2011
The EU's cybersecurity agency, ENISA, has launched a new report on governmental cloud computing that targets at senior managers of public bodies who have to make a security and resilience decision about how to “go cloud,” if at all. The main goal of the report is to support governmental bodies in taking informed, risk-based decisions regarding security of data, resilience of service and legal compliance on their way to the cloud. It also highlights security and resilience pros and cons of community, private and public cloud computing services for public bodies.

"The new report presents a decision-making model for senior management to determine the best cloud solution from a security and resilience point of view,” said Daniele Catteddu, author of the report, which details and explains the different steps of the decision-making model, and applies the model to four sample services (electronic healthcare services, electronic administrative procedures, e-mail and human resources applications). Analysis and conclusions are mainly based on three scenarios, which describe the migration to cloud computing of a healthcare authority, a local public administration and the creation of governmental cloud infrastructure.

The Agency concludes that private and community clouds appear to be the solutions that best fit the needs of public administrations if they need to achieve the highest level of data governance. If a private or community cloud infrastructure does not reach the necessary critical mass, most of the resilience and security benefits of the cloud model will not be realized.

The executive director, professor Udo Helmbrech, said, "Public cloud offers a very high level of service availability, and is the most cost-effective. Yet, currently its adoption should be limited to non-sensitive or non critical applications, in the context of a well-defined cloud adaptation strategy with a clear exit strategy."

The report makes several recommendations to governments and public bodies, including:

National governments and the EU institutions should investigate the concept of an EU Governmental cloud.
Cloud computing will soon serve a significant portion of EU citizens, SMEs and public administrations. National governments should thus prepare a cloud computing strategy and study the role that cloud computing will play for critical information infrastructure protection (CIIP).
A national cloud computing strategy should address the effects of national/supra-national interoperability and interdependencies, cascading failures, and include cloud providers into the reporting schemes of articles 4 and 13 of the new Telecom Framework Directive


Featured

  • Security Industry Association Announces the 2026 Security Megatrends

    The Security Industry Association (SIA) has identified and forecasted the 2026 Security Megatrends, which form the basis of SIA’s signature annual Security Megatrends report defining the top 10 factors influencing both near- and long-term change in the global security industry. Read Now

  • The Future of Access Control: Cloud-Based Solutions for Safer Workplaces

    Access controls have revolutionized the way we protect our people, assets and operations. Gone are the days of cumbersome keychains and the security liabilities they introduced, but it’s a mistake to think that their evolution has reached its peak. Read Now

  • A Look at AI

    Large language models (LLMs) have taken the world by storm. Within months of OpenAI launching its AI chatbot, ChatGPT, it amassed more than 100 million users, making it the fastest-growing consumer application in history. Read Now

  • First, Do No Harm: Responsibly Applying Artificial Intelligence

    It was 2022 when early LLMs (Large Language Models) brought the term “AI” into mainstream public consciousness and since then, we’ve seen security corporations and integrators attempt to develop their solutions and sales pitches around the biggest tech boom of the 21st century. However, not all “artificial intelligence” is equally suitable for security applications, and it’s essential for end users to remain vigilant in understanding how their solutions are utilizing AI. Read Now

  • Improve Incident Response With Intelligent Cloud Video Surveillance

    Video surveillance is a vital part of business security, helping institutions protect against everyday threats for increased employee, customer, and student safety. However, many outdated surveillance solutions lack the ability to offer immediate insights into critical incidents. This slows down investigations and limits how effectively teams can respond to situations, creating greater risks for the organization. Read Now

Most   Popular

New Products

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities

  • EasyGate SPT and SPD

    EasyGate SPT SPD

    Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles.