Follow Us

Follow us on Twitter  Follow us on LinkedIn
 

21 November 2023

Joint industry statement calls for removing sovereignty requirements from European Cybersecurity Certification Scheme for Cloud Services (EU


ENISA’s current candidate scheme includes political and legal sovereignty elements, such as the requirement to have the company’s headquarters located in the EU, restrictions on ownership and governance restrictions.

The European Banking Federation (EBF), together with the European Savings Banks Group (ESBG), the Association for Financial Markets in Europe (AFME), the European Payment Institutions Federation (EPIF), and Insurance Europe have co-signed a joint statement on the ongoing process of developing a cybersecurity certification scheme for cloud services (EUCS). While the industry welcomes the objective of establishing a minimum set of security and trust criteria for cloud services, the drafting of EUCS should be a purely technical process detailing the technical requirements for such certification.

ENISA’s current candidate scheme includes political and legal sovereignty elements, such as the requirement to have the company’s headquarters located in the EU, restrictions on ownership and governance restrictions. As things stand today, the inclusion of such requirements will be a step back and will ultimately undermine real competition in the European market, reduce choice for cloud customers and harm European industry and citizens.

Cloud adoption by financial services, which is steadily increasing, is key to improving agility, international competitiveness, resilience, client experience and cost efficiency, and even security. Depriving companies of a real choice of cloud providers will endanger their operational resilience and stifle digital innovation, while the lack of transparency in the process is also concerning.

EBF



© EBF


< Next Previous >
Key
 Hover over the blue highlighted text to view the acronym meaning
Hover over these icons for more information



Add new comment