MEDINA

Cloud computing has evolved significantly during the last years and represents an essential element of innovative economies. The shift to cloud enables businesses to lower their costs, increase productivity and performance, efficiently cope with complexity of infrastructure, and deliver products faster. But despite numerous benefits cloud computing brings, the adoption rate among organizations is still limited due to transparency and security doubts they have.

To assure trustworthiness and security of their services, cloud providers rely on security certification. But they face multiple challenges due to market fragmentation, diverse focus, lack of cloud-specific security certifications, and incompatibility of existing certification schemes.

That’s why to offer businesses more secure, sustainable, and interoperable cloud services, the European Commission introduced the new EU Cybersecurity Act, which proposes improving customer’s trust through European certification scheme. But to really increase its level of assurance and bring benefits to providers and customers, continuous certification for the whole supply chain is needed.

MEDINA faces this issue by developing a framework for achieving a continuous audit-based certification for cloud service providers, complying with the EU Cybersecurity act. Framework is comprised of tools, techniques, and processes supporting the continuous auditing and certification of cloud services and tackles the challenges of security validating/testing, machine-readable certification language, cloud security performance, and audit evidence management.