The European Union Agency for Cybersecurity Publishes a Draft Certification Scheme for Cloud Services
On December 22, 2020, the European Union Agency for Cybersecurity (ENISA) published a draft scheme for cloud services. Cloud services that meet the security requirements of the scheme will be able to obtain a certification attesting their level of cybersecurity.
The draft scheme sets out criteria that apply to the design and implementation of cloud services, including their security features and the essential processes used throughout their lifecycle. It supports three assurance levels: “basic”, “substantial”, and “high”.
