1. Chris Gow Senior Manager, Government Affairs 16 June 2015 EU28 Cloud Security Conference, Riga Can we regulate our way to a safer cloud?

2. 2 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Three characteristics of security Related principles for good regulation What this means for cloud Mapping it to the EU NIS Directive Presentation flow

3. 3 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Three characteristics of security

4. Fast changing landscape

5. Security is global © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5

6. Total security comes at a cost

7. 7 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Related principles for good regulation

8. Changing landscape  flexible approach

9. Global problem  global solutions

10. Security cost  proportionate to risk presented

11. 11 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential What this means for cloud

12. 12 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Flexible  PPP/ guidelines/ codes of conduct European cloud strategy – C-SIG CoC, standards mapping, SLAs

13. 13 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global solutions  international standards norms of behaviour Information sharing and incident preparedness exercises law enforcement access

14. 14 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Proportionate to risk  Cloud relevant to extent used in high risk scenarios e.g. critical infrastructure

15. 15 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Mapping it to the EU NIS Directive

16. 16 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Flexible  NIS Directive is by nature a hard law instrument BUT appreciate not overly prescriptive

17. 17 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global solutions  Improves European coordination BUT Needs to safeguard international standards approach

18. 18 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Proportionate to risk  No sense in including cloud as an operator Should describe responsibilities critical operator should flow down to CSP

19. Questions? @ChrisJGow