The European Union Agency for Cybersecurity (ENISA) launched a public consultation, which runs until 7 February 2021, on its draft of the candidate European Union Cybersecurity Certification Scheme on Cloud Services (EUCS). The scheme aims to further improve the Union’s internal market conditions for cloud services by enhancing and streamlining the services’ cybersecurity guarantees.

The EU Cybersecurity Agency: ENISA

The public consultation allows interested parties to provide feedback on the draft EUCS candidate scheme. The outcome of this consultation will be processed and shared with the public. The consultation will remain open until 7 February 2021, 12:00 CET.

During the period of the public consultation, a review by the European Cybersecurity Certification Group (ECCG) and the Stakeholder Cybersecurity Certification Group (SCCG) will also be undertaken. Following the consultation, the EUCS candidate scheme will be updated and submitted to the ECCG for its opinion.

To participate in the public consultation, visit: Draft EUCS Candidate Consultation Survey.

 

Backgroud

Under the EU Cybersecurity Act (CSA) of 2019, the EU Agency for Cybersecurity assists in the preparation of candidate cybersecurity certification schemes. The EUCS consultation is established in accordance with Article 49(3) of the CSA.

The current draft of the EUCS candidate scheme is based on expert input from the Cloud Service Provider Certification (CSPCERTWorking Group and the EUCS ad-hoc working group, which includes members from industry, and participants from Member States and European Institutions. The draft also takes into consideration international standards and national certification schemes across the Union.  

The draft EUCS candidate scheme is the second candidate cybersecurity certification scheme introduced by the EU Agency for Cybersecurity this year. In July 2020, the Common Criteria Based European Cybersecurity Certification Scheme (EUCC), which aims to replace the existing schemes operating under the SOG-IS MRA for ICT products, opened for a month-long public consultation.