AmCham CZ’s Post

View organization page for AmCham CZ, graphic

1,277 followers

View profile for Weston Stacey, graphic

Executive Director at American Chamber of Commerce in CR

This week, in a conference room in Brussels, a decision may be made that will have the same impact, with far less fanfare, as the one about combustion engines.   ENISA, Europe’s cybersecurity agency, is hosting the group of member state agencies (ECCG) to discuss the deadlock over a European cloud certification scheme (#EUCS). They could push a proposal further into the bowels of the Brussels decision-making process.   The architects of`EUCS originally intended to create a set of common technical requirements for companies which want to provide cloud services to governments and critical infrastructure providers. France soon saw an opportunity to use their prowess with the Brussels bureaucracy to manipulate the rules to exclude the primary providers of cloud services in favor of their own companies. This they presented as “digital sovereignty”.   Would Czechia and other European countries benefit from France’s move? It is hard to see how.   Last week, over a thousand software geeks and entrepreneurs gathered in Prague for the Google Summit. Over the course of a day, Google engineers presented the technological advances that constitute its multi-layered cloud platform. That platform contains a vast array of different applications-- including a package of sophisticated technologies to protect government data- that can tailor how each company can utilize the cloud. An astounding amount of talent, technology, and money that goes into delivering the cloud to your laptop. It is not easy to replicate that combination, especially at the scale needed to run a cutting edge and secure cloud platform.   If every country limited its government to work only with domestic suppliers, they would limit the growth- and the security- of the cloud. And countries with fewer resources would have a major disadvantage. Essentially, by pushing for territorial requirements in EUCS, France has asked the rest of Europe to restrict the capability and security of cloud in their country. That is not digital sovereignty, but the path to digital vulnerability.   What is reported to be on the table this week is a potential solution. The most recent proposal stripped out all the requirements not necessary to ensure the security of the technology. This proposal was not supported at the last meeting. It seems as though it will be raised again. Some are confident it will prevail this time.   The National Cyber and Information Security Agency has supported sticking to security. They have one concern. Strictly technical requirements do not allow authorities to exclude malicious actors- especially hostile states- from providing cloud services to governments. Such concerns are valid. Russia will use software, not soldiers, to undermine Czechia. Geopolitical concerns may or may not be best handled by EUCS, but it needs to addressed somewhere in Europe’s cybersecurity regime. American Chamber of Commerce to the European Union (AmCham EU) AmChams in Europe

  • No alternative text description for this image
  • No alternative text description for this image

To view or add a comment, sign in

Explore topics