Ad-hoc Working Group on Cloud Services

In accordance with article 48(2) of Regulation (EU) 2019/881 (hereinafter, Cybersecurity Act), ENISA seeks to assist the European Commission in the preparation of a candidate cybersecurity certification scheme on cloud services.

Scope

The scope of this cybersecurity certification scheme will address such aspects as, stimulating the uptake of cloud services among users, user trust to cloud services and the provision of cloud services by service providers; this scheme will further support data mobility as well as compliance with the EU legal framework on the digital single market. This scheme could be further developed to meet vertical sector requirements, as necessary and in line with EU policy.

The scope of this ad hoc working group is to support ENISA in preparing the above-mentioned draft candidate cybersecurity certification scheme.

Key tasks of this ad hoc working group include a review of existing cloud security certification schemes, a precise scoping of the future candidate scheme, the pre-qualification of elements that ENISA needs to include in a cybersecurity certification scheme, support the drafting of a scheme in line with the provisions of Regulation (EU) 2019/881 and generally support ENISA in carrying out its tasks in relation to the preparation of this draft candidate cybersecurity certification scheme.

Selected Members