The main aim of EU-SEC is to improve trust in cloud services by creating a framework under which existing certification and assurance approaches can co-exist. The framework serves basic requirements of the EU Cybersecurity Act and adds an additional layer of trust, assurance and transparency by including continuous auditing-based certifications. It is targeted at cloud stakeholders wishing to improve the business value, efficiency and effectiveness of their approach to cloud security and privacy compliance. This includes auditors, cloud service providers, regulators, standard owners and cloud users.

In addition to all the work required to build the framework architecture, the project partners have worked hard to produce a variety of materials to ensure the project outcomes remain at the disposal of cloud stakeholders. The resources inlcude:

• White Papers
• Videos
• Training packages
  

Jürgen Grossman, coordinator of the EU-SEC project said, “There have been many challenges over the last three years, but I am proud of the results that EU-SEC has achieved. These results have been obtained thanks to the hard work of all the partners who brought their expertise to the consortium. I’m confident the outcomes will deliver benefits to European cloud stakeholders.”

Fraunhofer FOKUS would like to encourage anyone interested in benefiting from the framework to get in touch via the website.

Fraunhofer FOKUS is project coordinator and scientific partner for the specification and development of the Continuous Auditing Certification Scheme. Fraunhofer has defined the Continuous Auditing Certification Scheme in the Governance Structure & Integration work package and supports its implementation, its piloting as well as its exploitation throughout the project’s other work packages. Moreover, Fraunhofer FOKUS is responsible for the overall project coordination and the innovation management. 

About EU-SEC

The project “European Security Certification Framework” (EU-SEC) aims to create a European framework for certification schemes and evaluation concepts to secure cloud infrastructures. Within this framework, existing national and international certifications can co-exist. EU-SEC will improve the business value as well as the effectiveness and efficiency of existing cloud security certification schemes.