1 EuroCloud Star Audit Based on European Quality Values for a Worldwide Usage International Partner Program by EuroCloud Europe EuroCloud Europe Coordinators, EC Countries, In Foundation 2 EC Countries - A EC Countries - B • Austria • France • Germany • Hungary • Italia • Luxembourg • Netherlands • Poland • Portugal • Romania • Slovakia • Slovenia • Spain • Sweden • Switzerland • United Kingdom • Belgium • Denmark • Greece • Ireland • Malta • Monaco • Russia • Serbia In Foundation • Bulgaria • Cyprus • Lithuania • Turkey • Ukraine Page 3 ECSA introduction Important aspects on the way from Outsourcing to Cloud Sourcing 4 The same cloud service can provide: • different use case • different requirements for the SLA Traditionel: complex B2B Contracts with QoS, KPI, Compensation, Monitoring and Auditing Cloud: standard contracts for standard services Complexity of law: • Licenses • Identity management • Optaining SLA's Traditional: Individual, specific long-term calculated over several years Cloud: Standard, industrialized, shared services, large volumes, large investments, short contracts Traditional: A fully responsible provider with known subcontractors Cloud: Provider chain, cross-border, network bandwidth as an additional risk ECSA Ecosystem What needs to be addressed 1. 2. 3. 4. 5. 6. 7. Cloud Specific Assessment Security Assessment Legal Compliance Assessment Data Privacy Assessment Common Scope - no negotiations Complete Cloud Supply Chain covered publicly available Controls 5 EuroCloud Europe Vision ECSA Vision I. Deliver a framework, assessments and a certificate that are meaningful selection tools for customers who want to use trustworthy cloud services. II. To reduce the necessity to perform costly individual audits. III. To provide a valuable instrument with a high level of transparency and guidance for customers and providers alike. 9 ECSA Ecosystem What is the EuroCloud Staraudit (ECSA) The EuroCloud Star Audit (ECSA) is a mature certification scheme, especially designed to asses cloud service. 10 ECSA Ecosystem What is the EuroCloud Staraudit (ECSA) 11 Established in spring 2011 EuroCloud evaluates a cloud service against the requirements of the ECSA audit scheme and covers all participants of the specific supply chain of a cloud service. ECSA Ecosystem What is the EuroCloud Staraudit (ECSA) The ECSA audit has a nonnegotiable mandatory bandwidth of all important areas of a cloud service: 12 ECSA Ecosystem What is the EuroCloud Staraudit (ECSA) ECSA has a modular structure and offers three maturity level (indicted by awarded stars) it is not only suitable for large enterprises but can also be achieved by a SME-type of cloud provider. 13 ECSA Ecosystem What is the EuroCloud Staraudit (ECSA) If a cloud services matches the ECSA audit criteria the ECSA certificate is granted. 14 ECSA Ecosystem What is the EuroCloud Staraudit (ECSA) The ECSA certificate is a meaningful selection tool for customers who want to use trustworthy cloud services and it reduces the necessity to perform costly individual audits. 15 ECSA Ecosystem What is the EuroCloud Staraudit (ECSA) With the ECSA EuroCloud Europe delivers a valuable instrument with a high level of transparency and guidance for customers and providers alike. 16 EuroCloud Star Audit www.eurocloud-staraudit.eu Assessment tool 17