Can MEDINA’s security framework of tools add value to DOME’s cloud-to-edge federated marketplace ecosystem?

To generate trust in the services offered on the marketplace by the cloud providers, said services must be compliant with the EU regulations, codes of conduct, standards and certification schemes, before being on-boarded and while residing on the marketplace.

As part of the roll-out activities, DOME is addressing the certification of the services inside the Marketplace in accordance with the European regulatory framework, and the upcoming EU Cloud Rulebook, which provides a single European framework with relevant binding and non-binding rules for cloud service customers and providers in Europe. At certification level, DOME proposes:

• A formal process to verify the compliance against reference standards,.a methodological framework supported by existing and new tools to evaluate the compliance of the cloud services when being on-boarded in DOME,
• The necessary tools to automatically continuously monitor that the certificates attained are valid (e.g., by checking the ENISA’s public registry).
• Tools to continuously monitor that the security requirements from the EUCS (European Cloud Security Certification), especially those of assurance level high are always being fulfilled and to support the conformity assessment of the reference standards.

In this respect, the outcomes of the MEDINA project can leverage the implementation of the certification approach in DOME, through the MEDINA framework for EUCS certification.

All the cloud services that will be included in the DOME federated marketplace ecosystem will have to warranty some security requirements before being included. MEDINA’s tools are being considered from the beginning of the project to be incorporated as a mechanism to demonstrate that any cloud service included fulfils the EUCS requirements:

1. As added value services for the CSPs which want to achieve the EUCS or other certification to be able to be endorsed in DOME, or to gain competitive advantage and transparency to their customers.
2. As the methodological and technical baseline to define the certification and security compliance approach in DOME.

MEDINA and DOME collaboration has already started and will continue applying the outcomes and lessons learnt from MEDINA towards the implementation of the DOME marketplace with secure and certified European Cloud and Edge services.

Take a look at the original Blog post by Juncal Alonso from TECNALIA