1. Workshop: Certification & Testing recommendation for Cloud standard compliance

2. AGENDA CloudWatch Intro – Daniele Catteddu / CSA
Workshop objectives - Daniele Catteddu / CSA
European Cloud Computing Strategy - Tjabbe Bos / EC
Certifying Information Security in the Cloud - Tom Nicholls / BSI
FitSM: lightweight standards for service management in federated cloud - Owen Appleton / Emergence Tech Limited
Open discussion
Contribute to CloudWATCH and tell us about your use cases.
CloudWATCH will help drive awareness and adoption of cloud computing in Europe through the sustainable cloudwatchhub.eu, a central pan-European digital platform supporting the Single Digital Market. The service ecosystem approach will promote open-source, interoperable services resulting from European initiatives, helping to transform the way they typically communicate their R&D.
Cloudwatchhub.eu will provide independent, practical information, helping users in all sectors understand and evaluate the benefits of cloud computing.
It will highlight opportunities for European SMEs as providers and users of cloud services. Its information services will address the many questions, concerns and hesitations that are holding back cloud adoption in Europe.
It will provide practical guidelines on setting safe, fair and compliant contracts and on privacy level agreements. These information services are particularly important for micro and small businesses, which cannot afford or have difficulty accessing legal expertise on cloud computing, and pave the way for the wide uptake of cloud and European R&D solutions.

3. Daniele Catteddu – Managing Director EMEA, Cloud Security Alliance
A European cloud observatory supporting cloud policies, standard profiles and services
Daniele Catteddu – Managing Director EMEA, Cloud Security Alliance

4. Driving the uptake of cloud in Europe
The cloud way is the smart way……
…….but it needs to be secure, fair and interoperable.
Accelerating and increase the use of cloud computing across the public and private sectors in Europe
Supporting international efforts on interoperability and portability
The cloud way is the smart way but it needs to be secure, fair and interoperable.
CloudWATCH focuses on key issues, disseminating best practices on cloud services and adoption, fostering a multi-stakeholder dialogue and facilitating the emergence and use of standards contracts.
Continued dialogue between all stakeholders (business users, governments, researchers, providers and consumer associations) is required to evaluate ways to increase commitment to transparency, openness and compliance.
Accelerating and increase the use of cloud computing across the public and private sectors in Europe and strengthen collaborative, international dialogue on interoperability and portability.
The overriding objective of CloudWATCH is to facilitate understanding of the benefits of cloud computing, helping all sectors to evaluate different solutions and overcome major barriers to uptake. In line with industry recommendations, CloudWATCH will help drive awareness and adoption of cloud computing in Europe.
Multi stakeholder dialogue to increase commitment
Transparency
Openness
Compliance

5. the online face of CloudWATCH, will become a sustainable platform which continues beyond the lifetime of the project. This will create and promote a European digital ecosystem of software and services, highlighting real-world benefits and best practices that help make savings, increase energy efficiency, create new, value-add services and products, conduct new lines of research and deliver better services to citizens. CloudWATCH will ensure high visibility of European R&D cloud initiatives driving interoperable solutions & services, transforming the ways results are disseminated and sustained.
Provide practical information on cloud adoption to assist potential SMEs and industry adopters of cloud computing including cloud services, cost benefits, guidelines and checklists, security, trust and privacy issues, legal issues and regulations, a directory of EU cloud service providers, and a set of case studies and benefits. This will also include a set of webinars focussing on practical legal guidance
CloudWATCH will provide a portfolio of European and international use cases. The use cases will cover technical requirements, policy and legal requirements, such as SLA management. This will lead to the development of common standards profiles and testing around the federation of cloud services. CloudWatch
will make an active contribution to standards and certification, driving interoperability as critical to broadening choice and boosting innovation. To support this, 2 use case workshops will take place to showcase results and collect further data. Furthermore, 6 standards profiling workshops and engage strongly with SDOs.
CloudWATCH will also support efforts around certification and compliance and deliver 2 certification and testing workshops.

6. Our Partnership Our Network
The CloudWATCH Consortium is made up of six, experienced European partners with competences, a proven track-record in the areas covered by the project and demonstrable commitment to its objectives.
The consortium's network brings to the table an extensive EU and international network, which will ensure effective outreach to the target audiences.
The Consortium has an extensive, collective network, which, in Europe, covers 24 member states and 4 associate countries. CloudWATCH will benefit considerably from the outreach and dissemination activities of partners. CSA, with its network of 140 corporate members and 60 global chapters, takes an active part in EU and international events on security targeting CIOs, CTOs, business leaders, government representatives.
DIGITALEUROPE AISBL, as a champion of the European digital economy, has a significant footprint in cloud computing and has built industry consensus around its mission. Trade association membership represents 10,000+ companies. Its blog links directly to EurActiv.
EGI.eu brings its recognised worldwide leadership and collaborations to provide an important channel for dissemination and adoption of the work coming out of CloudWATCH. It has a large network of users and resource providers and considerable experience of disseminating scientific excellence.
Fraunhofer is a leading research institution involved in national, European and international cloud initiatives with strong links to the public sector and industry, and has contributed to shaping the German cloud strategy with commercial stakeholders and policy makers.
Trust-IT is increasingly appreciated for its expertise of cloud computing in Europe and beyond. It has established strong media relations and has led large-scale dissemination campaigns, driving the self-sustained Cloudscape series as a forum and has an extensive network across the public and private sectors.
ICT Legal brings legal expertise, insights provided at European conferences and editorial contributions to European and international newspapers and magazines (e.g. Corriere della Sera, Il Sole 24 Ore, The Wall Street Journal, Affari Italiani, European Voice). It also brings links to the EU Privacy Council.
UOXF is one of the most widely reported universities in the world both nationally and internationally and regularly engages at multiple levels of engagement at policy & scientific levels, including keynotes at international conferences & different types of collaborative partnerships.

7. Setting out the right way Insights from thought-leaders
Building on support
Strong community support and engagement right from the start with cross-sector support for the initiative through letters of support and recruitment of the Business Innovation & Global Interoperability Expert Group (BIGI)
CloudWATCH Champions - To help drive CloudWATCH, and ensure the project moves with the wider community, CloudWATCH has engaged with key individuals which make up a Business Innovation & Global Interoperability Expert group (BIGI), supporting its strategic goals and helping to
ensure the long-term sustainability of CloudWatchHUB.eu. The BIGI will also raise awareness of cloud computing & best practices for eScience, Industry & SMEs & government. These experts come from three major groups: SMEs and large enterprises; government and public authorities; education and research institutions.
Setting out the right way
Insights from thought-leaders
Strong support
Wide community
Benefits
Best practices
Big issues

8. Meet us at...
In the first six months, CloudWATCH will engage and contribute actively in monthly events around Europe and beyond, to raise the profile of the project and to support achieving its goals. Engagement with stakeholders at events will support the collection of use cases which will be analysed to define a set of cloud standards profiles. A series of six Cloud Profile workshops will further this work and see engagement with standard initiatives. Furthermore, two technical workshops to raise awareness of and promote Certification Schemes for cloud services are planned.
CSA EMEA, Edinburgh – Daniele Cattedu & Paolo Balboni – Panel Participaiont – Trust, Transparency and Accountability in/for Data Protection
OASIS Cloud Symposium, Luxembourg, 15-16/10/13 – Linda, Fraunhofer FOKUS, to join panel debate” Filling the identified gaps in Cloud standardization”.
ICT 2013
Networking session: Boosting EU Competitiveness with Cloud Computing - SME & Industry Perspectives, 16:00, Thurs 7 Nov
Showcasing the leading role played by EU small, medium and large enterprises in RTD partnerships to boost EU competiveness in cloud computing
Highlighting innovative start-ups and best public services and building ‘win-win’ public-private partnerships for the EU cloud strategy
Exhibition Stand: EU Innovation Cloud Hub
Showcase smart interoperable cloud services emerging from Call 8 & 10 projects and designed for European businesses

9. Tell us about what you’re doing in the cloud
Contribute to CloudWATCH and tell us about your use cases.
CloudWATCH will help drive awareness and adoption of cloud computing in Europe through the sustainable cloudwatchhub.eu, a central pan-European digital platform supporting the Single Digital Market. The service ecosystem approach will promote open-source, interoperable services resulting from European initiatives, helping to transform the way they typically communicate their R&D.
Cloudwatchhub.eu will provide independent, practical information, helping users in all sectors understand and evaluate the benefits of cloud computing.
It will highlight opportunities for European SMEs as providers and users of cloud services. Its information services will address the many questions, concerns and hesitations that are holding back cloud adoption in Europe.
It will provide practical guidelines on setting safe, fair and compliant contracts and on privacy level agreements. These information services are particularly important for micro and small businesses, which cannot afford or have difficulty accessing legal expertise on cloud computing, and pave the way for the wide uptake of cloud and European R&D solutions.

11. Workshop Objectives

12. Purpose of this workshop
This workshop aims at defining principles and specifications for the creation of an open schema to certify organisations and services against existing Cloud requirements and technical Cloud profiles.
Collect valid input to develop Deliverable 4.1)
Cloud certification and recommendation guidelines
Contribute to CloudWATCH and tell us about your use cases.
CloudWATCH will help drive awareness and adoption of cloud computing in Europe through the sustainable cloudwatchhub.eu, a central pan-European digital platform supporting the Single Digital Market. The service ecosystem approach will promote open-source, interoperable services resulting from European initiatives, helping to transform the way they typically communicate their R&D.
Cloudwatchhub.eu will provide independent, practical information, helping users in all sectors understand and evaluate the benefits of cloud computing.
It will highlight opportunities for European SMEs as providers and users of cloud services. Its information services will address the many questions, concerns and hesitations that are holding back cloud adoption in Europe.
It will provide practical guidelines on setting safe, fair and compliant contracts and on privacy level agreements. These information services are particularly important for micro and small businesses, which cannot afford or have difficulty accessing legal expertise on cloud computing, and pave the way for the wide uptake of cloud and European R&D solutions.

13. HOW?
Discuss with expert the state of the art in security certification for cloud computing both from the technical and policy perspective
Understand the needs of our audience w.r.t. cloud security certification and testing
The workshop will be based on existing material, existing cloud specific certification schema, and under development and cloud specific certification schemas.
Contribute to CloudWATCH and tell us about your use cases.
CloudWATCH will help drive awareness and adoption of cloud computing in Europe through the sustainable cloudwatchhub.eu, a central pan-European digital platform supporting the Single Digital Market. The service ecosystem approach will promote open-source, interoperable services resulting from European initiatives, helping to transform the way they typically communicate their R&D.
Cloudwatchhub.eu will provide independent, practical information, helping users in all sectors understand and evaluate the benefits of cloud computing.
It will highlight opportunities for European SMEs as providers and users of cloud services. Its information services will address the many questions, concerns and hesitations that are holding back cloud adoption in Europe.
It will provide practical guidelines on setting safe, fair and compliant contracts and on privacy level agreements. These information services are particularly important for micro and small businesses, which cannot afford or have difficulty accessing legal expertise on cloud computing, and pave the way for the wide uptake of cloud and European R&D solutions.

14. Input for the Open discussion

15. Certification SIG questionnaire
Background: the Selected Industry Group (SIG) certification expert group supports the EC in implementing action 1 of the Europe Cloud Strategy.
The SIG-certification agreed that the group will produce a list of security certification requirements and schemes which are fit-for-purpose to certify cloud computing services.
The SIG-certification decided to launch a survey.
Prepared by CSA/ENISA, reviewed by the SIG members and EC
Online since 25-MAR-2013 at
Reporting data where captured by 13-APR-2013
Contribute to CloudWATCH and tell us about your use cases.
CloudWATCH will help drive awareness and adoption of cloud computing in Europe through the sustainable cloudwatchhub.eu, a central pan-European digital platform supporting the Single Digital Market. The service ecosystem approach will promote open-source, interoperable services resulting from European initiatives, helping to transform the way they typically communicate their R&D.
Cloudwatchhub.eu will provide independent, practical information, helping users in all sectors understand and evaluate the benefits of cloud computing.
It will highlight opportunities for European SMEs as providers and users of cloud services. Its information services will address the many questions, concerns and hesitations that are holding back cloud adoption in Europe.
It will provide practical guidelines on setting safe, fair and compliant contracts and on privacy level agreements. These information services are particularly important for micro and small businesses, which cannot afford or have difficulty accessing legal expertise on cloud computing, and pave the way for the wide uptake of cloud and European R&D solutions.

16. Online Survey - Objectives
Contribute to CloudWATCH and tell us about your use cases.
CloudWATCH will help drive awareness and adoption of cloud computing in Europe through the sustainable cloudwatchhub.eu, a central pan-European digital platform supporting the Single Digital Market. The service ecosystem approach will promote open-source, interoperable services resulting from European initiatives, helping to transform the way they typically communicate their R&D.
Cloudwatchhub.eu will provide independent, practical information, helping users in all sectors understand and evaluate the benefits of cloud computing.
It will highlight opportunities for European SMEs as providers and users of cloud services. Its information services will address the many questions, concerns and hesitations that are holding back cloud adoption in Europe.
It will provide practical guidelines on setting safe, fair and compliant contracts and on privacy level agreements. These information services are particularly important for micro and small businesses, which cannot afford or have difficulty accessing legal expertise on cloud computing, and pave the way for the wide uptake of cloud and European R&D solutions.

17. Online Survey - Features
Contribute to CloudWATCH and tell us about your use cases.
CloudWATCH will help drive awareness and adoption of cloud computing in Europe through the sustainable cloudwatchhub.eu, a central pan-European digital platform supporting the Single Digital Market. The service ecosystem approach will promote open-source, interoperable services resulting from European initiatives, helping to transform the way they typically communicate their R&D.
Cloudwatchhub.eu will provide independent, practical information, helping users in all sectors understand and evaluate the benefits of cloud computing.
It will highlight opportunities for European SMEs as providers and users of cloud services. Its information services will address the many questions, concerns and hesitations that are holding back cloud adoption in Europe.
It will provide practical guidelines on setting safe, fair and compliant contracts and on privacy level agreements. These information services are particularly important for micro and small businesses, which cannot afford or have difficulty accessing legal expertise on cloud computing, and pave the way for the wide uptake of cloud and European R&D solutions.

18. What are the most important high-level objectives for a certification scheme?
Contribute to CloudWATCH and tell us about your use cases.
CloudWATCH will help drive awareness and adoption of cloud computing in Europe through the sustainable cloudwatchhub.eu, a central pan-European digital platform supporting the Single Digital Market. The service ecosystem approach will promote open-source, interoperable services resulting from European initiatives, helping to transform the way they typically communicate their R&D.
Cloudwatchhub.eu will provide independent, practical information, helping users in all sectors understand and evaluate the benefits of cloud computing.
It will highlight opportunities for European SMEs as providers and users of cloud services. Its information services will address the many questions, concerns and hesitations that are holding back cloud adoption in Europe.
It will provide practical guidelines on setting safe, fair and compliant contracts and on privacy level agreements. These information services are particularly important for micro and small businesses, which cannot afford or have difficulty accessing legal expertise on cloud computing, and pave the way for the wide uptake of cloud and European R&D solutions.

19. What are the most important high-level objectives for a certification scheme?
Contribute to CloudWATCH and tell us about your use cases.
CloudWATCH will help drive awareness and adoption of cloud computing in Europe through the sustainable cloudwatchhub.eu, a central pan-European digital platform supporting the Single Digital Market. The service ecosystem approach will promote open-source, interoperable services resulting from European initiatives, helping to transform the way they typically communicate their R&D.
Cloudwatchhub.eu will provide independent, practical information, helping users in all sectors understand and evaluate the benefits of cloud computing.
It will highlight opportunities for European SMEs as providers and users of cloud services. Its information services will address the many questions, concerns and hesitations that are holding back cloud adoption in Europe.
It will provide practical guidelines on setting safe, fair and compliant contracts and on privacy level agreements. These information services are particularly important for micro and small businesses, which cannot afford or have difficulty accessing legal expertise on cloud computing, and pave the way for the wide uptake of cloud and European R&D solutions.

20. What are the most important high-level objectives for a certification scheme?
Contribute to CloudWATCH and tell us about your use cases.
CloudWATCH will help drive awareness and adoption of cloud computing in Europe through the sustainable cloudwatchhub.eu, a central pan-European digital platform supporting the Single Digital Market. The service ecosystem approach will promote open-source, interoperable services resulting from European initiatives, helping to transform the way they typically communicate their R&D.
Cloudwatchhub.eu will provide independent, practical information, helping users in all sectors understand and evaluate the benefits of cloud computing.
It will highlight opportunities for European SMEs as providers and users of cloud services. Its information services will address the many questions, concerns and hesitations that are holding back cloud adoption in Europe.
It will provide practical guidelines on setting safe, fair and compliant contracts and on privacy level agreements. These information services are particularly important for micro and small businesses, which cannot afford or have difficulty accessing legal expertise on cloud computing, and pave the way for the wide uptake of cloud and European R&D solutions.

21. What are the most important high-level objectives for a certification scheme?
Contribute to CloudWATCH and tell us about your use cases.
CloudWATCH will help drive awareness and adoption of cloud computing in Europe through the sustainable cloudwatchhub.eu, a central pan-European digital platform supporting the Single Digital Market. The service ecosystem approach will promote open-source, interoperable services resulting from European initiatives, helping to transform the way they typically communicate their R&D.
Cloudwatchhub.eu will provide independent, practical information, helping users in all sectors understand and evaluate the benefits of cloud computing.
It will highlight opportunities for European SMEs as providers and users of cloud services. Its information services will address the many questions, concerns and hesitations that are holding back cloud adoption in Europe.
It will provide practical guidelines on setting safe, fair and compliant contracts and on privacy level agreements. These information services are particularly important for micro and small businesses, which cannot afford or have difficulty accessing legal expertise on cloud computing, and pave the way for the wide uptake of cloud and European R&D solutions.

22. Additional information on the certification, accreditation and certification scheme features:
Contribute to CloudWATCH and tell us about your use cases.
CloudWATCH will help drive awareness and adoption of cloud computing in Europe through the sustainable cloudwatchhub.eu, a central pan-European digital platform supporting the Single Digital Market. The service ecosystem approach will promote open-source, interoperable services resulting from European initiatives, helping to transform the way they typically communicate their R&D.
Cloudwatchhub.eu will provide independent, practical information, helping users in all sectors understand and evaluate the benefits of cloud computing.
It will highlight opportunities for European SMEs as providers and users of cloud services. Its information services will address the many questions, concerns and hesitations that are holding back cloud adoption in Europe.
It will provide practical guidelines on setting safe, fair and compliant contracts and on privacy level agreements. These information services are particularly important for micro and small businesses, which cannot afford or have difficulty accessing legal expertise on cloud computing, and pave the way for the wide uptake of cloud and European R&D solutions.