Embed Size (px)
Citation preview
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
Accountability for Cloud
and other Future Internet
ServicesThe A4Cloud project
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
Increase trust and assurance
Allow more dynamism
Decrease regulatory complexity
Provide effective data governance
and control in cloud-based IT
Drivers for an
accountability-based approach
Accountability-based approaches for trust and security
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
Conceptual Definition:
- Accountability consists of defining governance to responsibly comply with
internal and external criteria, ensuring implementation of appropriate
actions, explaining and justifying those actions and remedying any failure to
act properly.
Defining Accountability
Accountability for an organization consists of accepting responsibility for the
stewardship of personal and confidential data with which it is entrusted in a
cloud environment, for processing, sharing, storing and otherwise using the
data according to contractual and legal requirements from the time it is
collected until when the data is destroyed (including onward transfer to and
from third parties).
In addition, it involves committing to legal, ethical and moral obligations,
policies, procedures and mechanisms, explaining and demonstrating ethical
implementation to internal and external stakeholders and remedying any failure
to act properly.
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
Increasing consumer
and business confidence
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
The realm of
accountability research
Inter-disciplinary approach for co-designing Accountability
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
The Cloud Accountability
Community
Cloud providers
Cloud regulators
Cloud users
Auditors
Bodies for Standardisation
Corporate Governance stakeholders
Accountability
Stakeholders
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
Our deliverables
Control and Transparency
Policy Configuration and
Enforcement System
Accountability Validation Tool
Choice
Risk Assessment Tool
Contract Support Tool
Compliance
Evidence Collection System
Remediation Tool
Policy Monitoring Tool
Accountability Framework
Recommendations and guidelines
Reference architecture
Models on data governance
Interoperable Policy languages
Accountability metrics
Ethical Accountability
The Cloud Accountability Project
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
Accountability Framework Input
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
Protecting Personal Data
Cloud y
Cloud x
Cloud 1
Cloud Infrastructure
Provider
Cloud Consumer
Cloud Auditor
Cloud Service
Provider
Accountability
Agent
Regulator
Cloud Service
Provider
Cloud Infrastructure
Provider
Cloud Service
Provider
Cloud Infrastructure
Provider
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
Protecting Personal Data
Cloud y
Cloud x
Cloud 1
Cloud Infrastructure
Provider
Cloud Consumer
Cloud Auditor
Cloud Service
Provider
Accountability
Agent
Regulator
Cloud Service
Provider
Cloud Infrastructure
Provider
Cloud Service
Provider
Cloud Infrastructure
Provider
Actual Data
Natural Language
policy
Machine-based
policy
Accountability
certification
Data references
Preventive
mechanisms
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
Protecting Personal Data
Cloud y
Cloud x
Cloud 1
Cloud Infrastructure
Provider
Cloud Consumer
Cloud Auditor
Cloud Service
Provider
Accountability
Agent
Regulator
Cloud Service
Provider
Cloud Infrastructure
Provider
Cloud Service
Provider
Cloud Infrastructure
Provider
Actual Data
Notifications
Tracking and
auditing reports
Monitoring and
analysis
Detective
mechanisms
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
Protecting Personal Data
Cloud y
Cloud x
Cloud 1
Cloud Infrastructure
Provider
Cloud Consumer
Cloud Auditor
Cloud Service
Provider
Accountability
Agent
Regulator
Cloud Service
Provider
Cloud Infrastructure
Provider
Cloud Service
Provider
Cloud Infrastructure
Provider
Actual Data
Correction
Policy redress
Evidence
Data references
Corrective
mechanisms
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
Respecting
Confidential Information
Cloud y
Cloud x
Cloud 1
Cloud Infrastructure
Provider
Cloud Consumer
Cloud Auditor
Cloud Service
Provider
Accountability
Agent
Regulator
Cloud Service
Provider
Cloud Infrastructure
Provider
Cloud Service
Provider
Cloud Infrastructure
Provider
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
Respecting
Confidential Information
Cloud y
Cloud x
Cloud 1
Cloud Infrastructure
Provider
Cloud Consumer
Cloud Auditor
Cloud Service
Provider
Accountability
Agent
Regulator
Cloud Service
Provider
Cloud Infrastructure
Provider
Cloud Service
Provider
Cloud Infrastructure
Provider
Actual Data
Contract
Accountability
certification
Data references
Bilateral
Contracts
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
Demonstrating visible presence & leadership by partners
Publishing requirements, concepts and approaches early in the project
Targeting communities of interest and identifying early adopters
Engaging in standardisation during the project lifetime
Publishing guidelines and practices for cloud providers and users to
use
Reference implementations and pilot services
Stimulating uptake and interest
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
Make all stakeholders accountable for the use of data in the cloud
• Shift the balance of power in the relationship between providers and users of cloud
services
Scale of economics on bringing data intensive services to the market
Uptake on new added value services
Novel accountability services businesses on the way
Raising societal
and economic impact
Independent initiative for accountability in cloud services
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
For cloud service users
• Control and transparency over how their data is used
• Help in assessing trustworthiness of CSPs
• Support in obtaining redress
For service providers
• Techniques to make services more trustworthy
• Ways to satisfy business policies and demonstrate compliance
• Allowing differentiation
For regulators/auditors:
• Assurance about compliance with policies and regulations
Realising the benefits
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
Who we are
Coordinated by:
Industry Partners
Research Institutes
R&D in technical, legal and socio-economic aspects of Accountability
Cloud Community
& Standardisation
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
Collaborative Project under Call 8 of the 7th Framework Programme of
the European Commission
• DG.CONNECT – Unit H4: Trust & Security
Project Start Date: 1st October, 2012
Project Duration: 42 months
Contact us: [email protected]
Project Details
Stay tuned - www.a4cloud.eu
This project is partly funded from the European Commission’s Seventh Framework Programme (FP7/2007-2013) under grant agreement no: 317550 (A4CLOUD).
Thank You.
![The European Cloud Iniave - 4instance.mobi · European Cloud Ini1a1ve – Policy Context range of related policies European Cloud Compung Strategy [COM(2012) 529] Data-driven Economy](https://img.dokumen.tips/doc/110x75/5f924de66a318a29946ae0a4/the-european-cloud-iniave-european-cloud-ini1a1ve-a-policy-context-range-of.jpg)
