TR17 INCYBER EUCS the decline of a European ambition
Since 2020, ENISA has been working on the European Cybersecurity Certification Scheme for Cloud Services (EUCS), aimed at harmonizing evaluation criteria and assurance levels across Europe by defining common standards for cloud service providers. However, the latest version of the project, which lacks the ‘High+’ level that ensures the immunity of cloud services from extraterritorial legislation, has drawn criticism from advocates of European digital sovereignty. France, which appears relatively isolated at the European level, fears that in its current form, the scheme will undermine its SecNumCloud framework and be insufficient to effectively protect citizens’ personal data. What are the consequences for countries that have already invested in stricter certifications? Operationally, how can data protection, innovation, and access to a competitive cloud offering be reconciled? Politically, does this text signify the decline of European industrial ambition in the cloud?
Allez à la source