1. 1 DWB meeting of 25 of February 2011 Vision Infrastructure Project on Secure Infrastructure for CONfidential data access (SICON) Presented by Dario Buono Eurostat Unit B2 – Methodology and research

2. 28 January 2011ITSC 2 Background information Framework of the VIP SICON and related projects EGR, TRIS and DASP Role of DIGIT Setting of the Steering Group, Inception Meeting took place in January 2011 Scope, milestone and deliverable approved

3. 28 January 2011ITSC 3 SICON objectives 1.set up in Eurostat a common infrastructure for the sharing and access to confidential data from MSs. 2.the confidential data can be viewed, processed and minor editing can be made. Tasks will include to deal with the setting up of the IT infrastructure, the technological aspect (software, …) the security issues and logical/procedural aspects (guidelines, documentation) of the infrastructure and its piloting in real size.

4. 25 February 2011DWB meeting 4 Related projects Main projects (prioritised) –EGR Euro Group Register –DASP Decentralised Access for Scientific Purposes Important project –TRIS and VIP data validation –EBB –GSAST –Direct remote access for researchers –Access for teleworkers

5. 28 January 2011ITSC 5 Technical and security aspects A secured network environment (INTSEC) hosted on Eurostat servers separated out from production environment (FULSEC) CITRIX solutions for managing/configuring secured access vs. WEBGATE both drawing on cooperate solutions available at Commission level (DIGIT - RACHEL) Security standards and protocols Development of applications and tools to be hosted and operate in the environment –Analysis of confidential micro data –EGR –EBB and 3 rd level validation

6. 28 January 2011ITSC 6 Project organisation issues Early difficulties Timeliness (need for ad-hoc solution) Heavy dependence on external provider –DIGIT –Outsourcing (DIGIT FC) and contractor performance Dedicated WIKI space

7. 28 January 2011ITSC 7 Milestones for the next 24 months MilestonesDeadline/Status Set up SG on VIP SICONJan 2011/ closed Define the common requirements for the systemFeb 2011/ Ongoing Design and setting of the overall architecture of the system integrating the different components and service (file transfer, user and access administration, report and audit system) Jun 2011 To pilot it with EGR and later DASPSept. 2011 Design and documentation of administrative procedure, protocols and workflow for the use of the system (including Eurostat and MSs staff) Dec. 2011 General security recommendationsJune 2011 Audit the system from a security point of view (from Eurostat and MS perspective) 1 st half of 2012 To draw final recommendation for long term development and sustainability of the infrastructure 2 nd half of 2012 Documentation and training for operating and maintaining the system 2 nd half of 2012

8. 28 January 2011ITSC 8 Next action Launching of DIGIT Framework contract

9. GRAZIE per l’attenzione 28 January 2011ITSC 9