[Fiware-security] CEN workshop agreement

[Aljosa Pasic]

Dear all,

 

I am glad to announce that  CEN/BT approved CEN Workshop Agreement /CWA)
on assurance in the cloud  and asked CEN-CENELEC Management Centre to
take the necessary steps for initiation. It was a tough battle. The
original idea was to launch CEN workshop agreement on November 19th ,
together with the 3rd CIRRUS workshop organized by the Austrian
Standards Institute (ASI). I attach the final agenda of this event where
many EU projects will present their contributions and inputs to
standardization and certifications (TCloud, PaaSage, ABC4Trust, NESSoS,
VPH-Share, CUMULUS, A4Cloud).

 

However, two months ago, CEN technical committee (BT) rejected our
proposal to create CWA. Concerns were raised that this CEN Workshop is a
duplication of work and liaison with ISO/IEC JTC1 SCs in the field of
Cloud Computing as well as with ETSI Cloud Computing Coordination Group
claiming that link is missing. ASI has resolved these concerns, (liaison
is actually strong since ETSI draft document already incorporates part
of CIRRUS D4.1), and adjusted business plan in  order to submit it again
to CEN/BT. The new plan was approved and we have to pick up a new date
for CWA kick off.

 

Therefore, the 3rd workshop (19/11) will serve as a preparatory action
for CWA kick off that has to be , according to the CEN rules, after
January 18th. Here is where you can help us. I believe CWA is one of the
main achievements for any EU projects when it comes to the
standardization. Related EU projects (in the area of cloud security)
should see it as an opportunity. CIRRUS will end one day, but CWA should
become standard and have longer life. 

 

FI-WARE project is especially encouraged to take more active role, since
the business plan that has been approved mentions that "the Workshop
will deliver one Workshop Agreement on "assurance in the cloud" that
will provide recommendations for the best practice and technical
specifications in the area of assurance for continuous monitoring and
certification of cloud computing services. This will range from a
machine readable certificates and policies, to the composition of
various certificates with a different origin or purpose".

 

 

 

Best regards, 

 

Aljosa

 

 

------------------------------------------------------------------
This e-mail and the documents attached are confidential and intended 
solely for the addressee; it may also be privileged. If you receive 
this e-mail in error, please notify the sender immediately and destroy it. 
As its integrity cannot be secured on the Internet, the Atos 
group liability cannot be triggered for the message content. Although 
the sender endeavours to maintain a computer virus-free network, 
the sender does not warrant that this transmission is virus-free and 
will not be liable for any damages resulting from any virus transmitted. 

Este mensaje y los ficheros adjuntos pueden contener informacion confidencial 
destinada solamente a la(s) persona(s) mencionadas anteriormente 
pueden estar protegidos por secreto profesional. 
Si usted recibe este correo electronico por error, gracias por informar 
inmediatamente al remitente y destruir el mensaje. 
Al no estar asegurada la integridad de este mensaje sobre la red, Atos 
no se hace responsable por su contenido. Su contenido no constituye ningun 
compromiso para el grupo Atos, salvo ratificacion escrita por ambas partes. 
Aunque se esfuerza al maximo por mantener su red libre de virus, el emisor 
no puede garantizar nada al respecto y no sera responsable de cualesquiera 
danos que puedan resultar de una transmision de virus. 
------------------------------------------------------------------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/old-fiware-security/attachments/20131018/2a440f62/attachment.html>