Tech Industry Association ITI Urges Transparency and Stakeholder Engagement as EU Advances Cybersecurity Certification Scheme for Cloud Services
BRUSSELS – Today, global tech trade association ITI, the Information Technology Industry Council, outlined recommendations for the candidate EU Cybersecurity Certification Scheme for Cloud Services (EUCS) in a new policy paper. Representing the broad consensus of the tech industry, ITI emphasises the importance of an open and transparent dialogue with stakeholders to ensure that cloud certification requirements are balanced, proportional and relevant to achieving the goal of improving cybersecurity in the European Union. ITI also calls upon all stakeholders – especially ENISA and the European Commission – to reconsider the clauses on EU-ownership and data localisation in the EUCS.
“ITI supports the goals of creating harmonised technical security requirements and improving the level of cybersecurity in the EU Digital Single Market,” ITI stated in its policy paper. “While we appreciate ENISA’s efforts to protect data, systems and infrastructure from anomalous behaviour, we remain seriously concerned with certain elements of the draft European Cybersecurity Scheme for Cloud Services currently being considered. To that end, we stand ready to support ENISA and the European Commission in their efforts to harmonise cybersecurity certification requirements for cloud services, foster trust, and stimulate cloud uptake.”
Among its recommendations, ITI:
- Advises adopting a risk-based approach focused on technical requirements, in line with ENISA’s mandate under the EU Cybersecurity Act, and stresses that the considered requirements implicate political choices that should not be made in a voluntary certification scheme.
- Reiterates the importance of stakeholder engagement and calls on ENISA to conduct a consultation and release an assessment of the need, feasibility, lawfulness and expected impact of the ownership and data localisation requirements.
- Emphasises that the EU’s WTO commitments and the values of equal treatment, non-discrimination and cooperation prescribe for the EU to remain open to like-minded partners.
Read the position paper here.
###
Related News & Analysis
Why an AI ‘Kill Switch’ isn’t a Catch-all Solution
AI is Supercharging Cyber Threats. Defenders Need New Tools and Partnerships.
