second cirrus workshopcloudaccountability.eu/sites/default/files/programme final.pdfcertification,...

Certification

, InteR

nation

alisation an

d stan

daRd

ization in cloUd Security (C

IRRU

S) aim

s to bring

together rep

resentatives of ind

ustry organization

s, law en‐

forcem

ent agen

cies, cloud

services providers, stand

ard an

d certification

services organization

s, cloud

con

sumers, aud

itors, data protection

autho

rities, p

ol‐

icy makers, softw

are compo

nent indu

stry etc. w

ith diverse interests in security an

d privacy issues in

cloud

com

puting.

Join the CIto stay upd

SeconOn July 24tnual Intern2013. Thisworld regioorities fromEuropean Strategy, bhave an imperts and w

The CIR

Date/tim

Venue:

Agenda: 08.30 – 009.00 – 009.15 – 1

10.15 ‐ 1010:45 – 1

13.00 – 114.30 – 1

15.45 – 116.15 – 1

IRRUS Linkedinated on the sec

nd CIRRth 2013 CIRRnational Com second worons regardinm an internatCommission,but is also exmpact globallywill generate

RRUS project

me: Wed

Kyotterrshttp:

9.009.150.15

0.4513:00

4.305.45

6.157.30

n group at httpscond workshop a

RUS worRUS will hold mputer Softwarkshop is aimng the cloud ctional conver, ETSI and Expected to liny. The worksan open and

partners are:

dnesday 24 Ju

o TERRSA, roa.or.jp/floorm//compsac.c

RegistOpeninFirst sability(Atos)KiichirNetwoPanel speakeSegkhoLee (Nity Sinwan), (Kyoto NetwoSecondGlobalThorntmoto, NetwoThird sPannerity Aucurity tion Ag

://www.linkedinand future CIRR

rkshopits second ware & Applicamed at identifcertification argence point ENISA in thenk with bodishop will featinteractive d

uly 2013 fro

oom 3‐B, Mormap.html. CIRs.iastate.edu/

rationng of the woression – Secuy and Interop, Margot Dor ro Onishi, (HPorking coffee on Governmers include Aoonthod (EleNational Cloudgapore), Dr CMr. Irwan Rao University, J

orking lunchd session – Inl Cooperatioton), Tarry Si(CSA) orking coffee session – Clotrat (Cloud Sudit Associatiand ISO/IEC gency, Spain)

.com/groups/CIRUS events.

workshop in cations Conferfying the staand standardof view. Thee implementes and institture presentadiscussions be

om 09.00 till 1

re info at httpRRUS wshop /

rkshop by Atourity and staperability. C(ETSI), YoshP and DMTF Jbreak & exhimental cloudloysius Cheanctronic Goved Computing Chao‐Ming Wawal Husdi (BJapan), Mr Al

ncident Manaon, Chair and ingh (O&I ser

breakoud Certificaecurity Allianion), YonosukSC27, Japan))

RRUS-Cloud-S

conjunction wrence Kyoto, tus in differedisation and we CIRRUS proation of the tutions outsidations from setween the p

18.00 hrs.

p://www.kyois co‐located

os and IPAandardisatioChair and spehiaki Kiriha, (NJapan) bitionds and securing (Cloud Secrnment AgenOffice, Infoco

Wu, (New TaipBPPT, Indonelex Lee, (Hon

agement, Inspeakers incrvices), Ikuo

tion. Chair annce), Tadashike Harada (In), Manuel Gar

ecurity-4710127

with The 37thJapan July 22ent countrieswill set list ooject supportEuropean Cde Europe ansubject matteparticipants.

oto‐d with COMPS

on issues in Cakers includeNEC and GICT

ity in Asia – curity Alliancncy Thailand)omm Developpei City Goversia), Prof. Dr.g Kong SAR g

formation shclude Mark HTakahashi an

nd speakers ii Nagamiya (Jnstitute of Infrcia Sanchez (

7

h An‐2‐26, s and f pri‐ts the Cloud nd to er ex‐

SAC conferen

Cloud Porte Aljosa PasicTF, Japan), M

Chair and ce), Dr.Sak ), Dr. Hin‐Yanpment Authornment, Tai‐. Shoji Kajita government)

haring and oekstra (Grand Mayu Ari‐

include AlainJapanese Secuformation Se‐(Data Protec‐

1

nce:

c Mr.

n r‐

nt

n u‐‐‐

Thpasean

Sp

Fian

Al

Ti

Ab

Pocomafedto DetinSewiopjecseam Th

ALvatecingSehejecterind

he detailedages. To attnd an emand lunch are

peakers

rst sessiond Intero

josa Pasic

tle: Securit

bstract: ortability anmputing. Wachine or dderate mulserve a coepending onguish useeveral Euroith interestperability acts and thecurity. Thismong other

he speaker

LJOSA PASIation (ARI)chnical Facg for Cap Gema Group e was particcts, mainly rests includustry adv


d agenda wtend the wil with youe free of ch

s and abs

on – Secuoperabili

c

ty Issues in

nd interopWhile portadata betweltiple cloudommon pun the entityr‐centric oopean reseting proposareas. In thieir possibles chain refer things, to e

r:

IC current p, based in culty of TecGemini (Utr(now part cipating in related to de Secure visory group


with presenworkshop, ur full nameharges for r

stracts

urity andty

n Cloud Por

erability aability geneeen differends. Therefourpose and y that cooror cloud search projesals that linis presentae contributiers to standensure the

position is Madrid, S

chnical Univrecht, The Nof Atos) wmore thanthe areas Software ap), electron


ntation titlplease rege and affiliaregistered p

d standar

rtability an

re two relaerally refernt clouds, iore interopis therefo

rdinates croervice provcts such ank to the station, we wions to buidards, certiportability

TechnologSpain. He gversity EinNetherlandwhere he ocn 50 internaof informaand Servicenic identity


les and abgister in adation to Aljparticipant

rdisation

d Interope

ated althours to the abnteroperaberability inre more cooss‐cloud ovider, CSPs Cloud4SOtandardisawill give an ld “the chaification fray and intero

gy Transfergraduated ndhoven, Thds) until theccupied difational resetion securie Engineery and priva


bstracts aredvance at wjosa.pasic@ts.

n issues i

rability

ugh differenbility to migbility usualnvolves intomplex to or inter‐clou‐centric inOA, Vision tion effortsoverview oain of confameworks operability

r Director iInformatiohe Netherlae end of 19fferent posiearch, innoity or e‐govring (he is acy, GRC (go

RRUS-Cloud-S

e [email protected].

in Cloud

nt requiremgrate appliclly refers toteraction bachieve thud processnteroperabiCloud or Cs in portabof the mosfidence‐buiand contray.

n Atos Reson Technolands, and h998. In 199itions. Durovation or cvernment. the chairmovernance,

ecurity-4710127

ed on the ns‐project.euThe works

d Portabi

ments in clcations, viro the abilitetween clohan portabises, we can ility scenarCumulus cbility and int relevant plding” in clact terms u

search & Inogy at Elehas been w99 he moveing this peconsulting pHis currenman of NES, risk and c

7

next u or shop

lity

loud rtual ty to ouds ility. dis‐rios. ame nter‐pro‐loud used,

nno‐ectro ork‐ed to riod pro‐t in‐SSOS com‐

2

pliritIASe

Mr

Ti

CuTh Ab

Clothonsepuvetomidece Th

Kilettemalsin strsidteron

Ma

Ti

CloAb

iance) as wty) Board oARIA, FI‐PPecurity Cert

r. Kiichiro

tle: ustomer Mahem

bstract:

oud serviceeir producn such use rvices acroublic cloud,endor lock‐mer privacentifying thrns will be

he Speaker

ichiro Onistt‐Packard m integratiso took maHP Japan. ructure frode HP inclurprise archne of the sta

argot Dor

tle

oud standabstract


well as cybeof DirectorsP and othetification) p

o Onishi

ajor Conce

es are in netion enviroof cloud. Toss various, (2) flexibl‐in, and (3)cy informathese custom presented

r:

shi is a DisJapan. Sincion projectajor role in Currently, om on‐premudes havinhitect. Kiichartup mem

ards, one is


ersecurity. s, and collabers. Currenproject.

erns on En

ew stage wonment. HoThe concerns cloud delle and agile) securely stion under mer concerd.

stinguishedce joined ints as well astarting upKiichiro is

mise envirog led localhiro is an Omber of DMT

too many,


He is memborates regntly, he is a

nterprise U

where enterowever, enns include, livery mode migrate bstoring theconformanrns, DMTF

d Technolon HP in 19as architectp of HP Ents working wonment to eization of TOpenCA MTF Japan ch

a thousand


mber of EOgularly withalso the pro

Use of Clou

rprises andnterprise cu(1) integr

del such as between cloeir data andnce to their activities a

ogist ‐ Infor990, Kiichirture initiatiterprise Clowith customexternal cloTOGAF8 an

Master certiharter.

d is not eno


S (Europeah organisatoject coord

ud and DM

d business ustomers sated operaprivate cloud serviced informatown securand standar

rmation Syro have engives for varoud Servicmers to plaoud servicend TOGAF9ified archit

ough

RRUS-Cloud-S

an Organisations such dinator of C

TF Activiti

units starttill have station and moud, manaes providertion assets rity policy. rds to addr

ystems Arcgaged in mrious custoes ‐ Virtualan to migraes. Kiichiro9 specificattect. In DM

ecurity-4710127

ation for Sas ENISA, ICIRRUS (Cl

ies to Add

t using themtrong concemanagemenaged cloud rs without including In this sessress these c

hitect in Hmany large omers. Kiicl Private Clate their ino's activity tions as anMTF, Kiichir

7

ecu‐IFIP, loud

ress

m as erns nt of and any cus‐sion, con‐

Hew‐sys‐hiro loud nfra‐out‐n en‐ro is

3

Th

ETopsigETMaligMaho

Yo

Ti

Int Ab

EvwitiowiThcoweelstio Th

YothhaprweTPTC

Pa

he speaker

TSI is an ICpen standargn the worTSI is locateargot workgence unit. argot graduolds a post‐

oshiaki Kir

tle

ter‐Cloud C

bstract

volving clouith large amon of Cloudill have an ihis talk intrllaborationell as a miss and protoon will be d

he speaker

oshiaki Kirien joined Nas been invroduct divisell as FutuPC for almoC on Inform

anel on Go Join the CIto stay upd

r

T standardrds for netwrk programed in Sophiked in the IShe is todauated in Pograduate d

riha

Computing

ud systemsmount of dd, inter‐cloimportant roduces reqn which arssion, scopeocols are ndiscussed a

r .

iha is a senNEC in 198volved in msion. His reure internetost of all IMmation Com

overnmenIRRUS Linkedinated on the sec

ds organizaworks and mme with ia AntipolisT and bankay in chargolitical Sciedegree in St

and Netwo

s become mata procesud is promrole to realquirementsre discussee, organizanow under s a summa

nior manag87, where hmany projeesearch intt service aM/NOMS/Dmmunication

nt and Clon group at httpscond workshop a

ation whoseservices. Ttheir inpus, France. k industry ge of strategence and Intrategic Ma

orking for S

more and msing in commising for vlize an secus, use‐casesed in GICTFation, activistandardizry of this ta

ger in the Che has worcts in NEC erests incluand manageSOM confen Managem

oud Secur://www.linkedinand future CIRR

e mission iThe 750+ mut and part

prior to joigy developnternationaarketing (H

Secure Soci

more distribming Big‐Davarious kinure social ins, system mF (Global Iities of GICTzation discualk.

Cloud Systerked in the and has trude distribement. He erences fromment, IEICE

rity .com/groups/CIRUS events.

s to enablemembers (6ticipation t

ining ETSI pment. Bornal Public LaEC Paris).

ial Infrastru

buted and ata and M2nd of socianfrastructumodels and Inter‐CloudTF. Especiaussion in IT

em ResearcR&D divisransferred buted systehas continm 2000 anE, 2010‐201

RRUS-Cloud-S

e the emerg60% Europto technica

to launch an and raiseaw (Aix‐Ma

ucture

complex in2M era. As al cloud appure. protocols d Technoloally, the intTU‐T SG13

ch Laboration for ovecore technms, real‐timnuously cod has serve11.

ecurity-4710127

gence of glean based)al committ

a market ined in Marsearseille III)

n order to a next genplications,

for Inter‐clogy Forum)ter‐cloud m3. Future di

tories, NECer 20 yearsnologies tome systemntributed ed as a cha

7

obal ) de‐tees.

ntel‐eille, and

deal nera‐and

loud ), as mod‐irec‐

C. He s. He o the s, as as a ir of

4

Dr

DrtorSu HeforNein PaAdDrM.of

Dr

DrDecobatioas YaReseArNa HivisFrGrCloCoSinHeMSHewi

r. .Sak Segkh

r. Sak is dirr in uranaree Un

e has been rmation Set@1509 PNAM (Nonacific Telecdvanced Ner. Sak studi..S. in CompTechnolog

r. HingYan L

r. Hing‐Yanevelopmentmputing. Uation centreon Programwell as co

an was Depesearch as wnior manartificial Inteational Com

ng‐Yan sersory panelramework (roup on Enoud Compuorporate Rngapore Joie graduatedS degrees ie previouslith 1st Clas


oonthod

rector of GoData

niversity of

a researchuperhighwroject, Pubn Alliance Mcommunicaetwork)Meied electroputer Studgy Ladkraba

Lee

n LEE is Prot AuthorityUnder his pe, cloud innmme, Data‐llaborationputy Directowell as Pringement anelligence Cmputer Boa

rves or hasl at the Sin(NICF) technterprise Cuting Stand&D advisoint ICT Coud from thein Computely studied s Honours


overnmentCommunif Technolog

her of NECway Testbeblic Key InfMovement)ation) Meeteting as wenics Systemies, Univerang.

ogram Direy of Singapopurview arnovation ceas‐a‐Servicn in Open Cor of Nationcipal Sciennd technicaCentre, Infoard) as well

served onngapore Pohnical commCloud Comdards Coorory panel, Suncil. e Universityer Science, at Imperiain Comput


t Informatiications gy.

TEC, since ed Project,frastructur) ’s ICT Meting, Thaiell as Netwms Engineersity of Ess

ctor of Natore, wherere initiativeentre, SaaSce ProgramCirrus and onal Grid Ofntist at theal positionsormation Tl as two hig

the Schooolytechnic, mittee on C

mputing & Vrdinating TaSingapore

y of Illinoisspecializin

al College Lting and MS


on Technoof Te

1997‐200, ThaiSARre Project eeeting, Thaiiland’s Repwork Expertering, Univex, B.S. ele

tional Cloude he oversees such as gS Enablememme, develoIBM Cloudffice at the Institute fos at Kent RTechnology gh‐tech star

l of Digital co‐chair o

Cloud CompVirtualisatiask Force (National A

s at Urbanng in artificLondon in USc in Manag


ology Servicelecommun

0 working N Project,etc. He is Tiland’s Reppresentativt for APEC versity of Eectronics ,

d Computines the natiogrid serviceent Programopment of d Lab Singa Agency ofor InfocomRidge DigitInstitute (rt‐ups.

Media & Inof Nationaputing, viceion (Singap(IT StandarArchives B

a‐Champaicial intelligUK where gement Sci

RRUS-Cloud-S

ces and a snication

on projec GINet PrThailand’s Rpresentativve in APANTEL. Essex (Ph.DKing Mong

ng Office atonal prograe provisionmme, Techncloud secupore. Priof Science, Tmm Researctal Labs, Ja(applied R&

nfocomm Tl Infocomme chair of Spore Comprds CommiBoard, and

ign in USA ence and she obtaineence.

ecurity-4710127

special instEngineer

cts such as roject, SchRepresentave in APT (AN (ASIA Pa

D). He obtaigkut’s Insti

t the Infocoamme in clning, SaaS innology Evaurity standar to this, HTechnology ch. He also hapan‐Singap&D arm of

Technologym CompeteSpecial Inteputer Socieittee), NatSthe Austra

with PhD software reed a BSc (E

7

truc‐ring,

In‐hool‐ative Asia acific

ined itute

omm loud ncu‐alua‐ards Hing‐and held pore f the

y ad‐ency erest ety), Steel alia‐

and euse. Eng.)

5

Dr

DrTaDetiocluYuMa Mr

IrwneEleReopopsiais go Dr

PrAcShstutecPrtioforancuenFo Mo

r ChaoMing

r Wu is theaipei City Gepartment, on Manageudes also puan Christiaanagement

r. Irwan Raw

wan Rawalesia. He obtectronics, Tesearch & Dpment on fipment of sean digital bworking onovernment

r. Shoji KA

rofessor at cademic Cehoji Kajita iudy of the chnologies rofessor of on, Kyoto Urmation Cond Social Inurrent mainnvironmentor more info

oderator: Join the CIto stay upd

Wu

e chairpersGovernmentChung Yuament, Centposition ofan Universt Departme

wal Husdi (BP

l Husdi postained BSc, Tokyo InstDevelopmeiber optic aet‐top‐box broadcastinn developminstitution

AJITA, (Kyo

IT Planningnter for Cos a researcways in wmutually sIT PlanninUniversity. ommunicatnformatics,n interests t for higherormation, v

Aloysius CIRRUS Linkedinated on the sec

son of Rest, Taiwan (an Christiatral Univerf Chief Secsity, Taiwanent, Chung Y

PPT, Indone

sition is thein Physicstitute of Teent related amplifier instandard eng system ament of sers and local

oto Univer

g Office, Inomputing ancher and prwhich comshape eachng Office, IHe was antion Techn, Graduateinclude e‐Lr educationvisit: http:/

Cheang (Cln group at httpscond workshop a

search, De(R.O.C.). Hean Universirsity, Taiwretary at In and the dYuan Chris

esia)

e Head of S, Universityechnology (to controln communiespecially fas part of mrvices base governme

sity)

stitute for Ind Media Sractitioner

mmunity dyh other as aInstitute fon Associatenologies an School of Learning anal instituti//shojikajit

loud Secur://www.linkedinand future CIRR

velopmente is also proity, Taiwanwan (1995‐Informationdirector of stian Unive

Science & Ty of Henri P(Japan), 20 and sensoications, aefor Early Wmigration td on cloud ents in deve

InformatioStudies, Kyoon Infield

ynamics ana stakeholdor Informate Professornd Servicesf Informationd e‐Scienons. ta.jp/ShojiK

rity Allianc.com/groups/CIRUS events.

t and Evaluofessor at In. He obtain1999). Hisn Managemf the researrsity, Taiw

Technology Poincare (F004. Previoors, as welleronauticalWarning Syo digital brcomputingeloping e‐G

on Managemoto UniversInformatio

nd informatder of commtion and Mr of Strategs, and alsoon Sciencece to actua

Kajita‐CV_e

ce) RRUS-Cloud-S

uation ComInformationned Ph.D. fs working ment Deparch institutan

Network CFrance), 19usly , he wl as in Resel navigationystem featuroadcastingg to providGovernment

ment and Csity on Information and cmunity. HeManagemengic Plannin Departmee, Nagoya Ualize scalab

en.html

ecurity-4710127

mmission, Nn Managemfrom Inforexperiencertment, Chte, Informa

Center in In993 and M.was involveearch & Den and in deure for Indog. Currentlyde solutionst

ommunica

atics definecommunicae is currentnt Communng Office inent of SystUniversity. ble informa

7

New ment rma‐e in‐hung ation

ndo‐Eng, ed in evel‐evel‐one‐y he s for

ation

d as ation tly a nica‐n In‐tems His

ation

6

Althfrograncoforstabe24ScHigloen

oysius Chee Standardom runninams for Glnd APAC pmmunity lrums, grouandardizatersecurity”,4762 et al iience froms professioobal mediant source of


eang is Mands Secretarg businessobal 500 oractice lealeader, havups and assion and wa, having coin the pastm the Nationonal certifia such as Tif specialist


naging Direriat. Aloysis units andorganizatioader with lving foundesociations ias most recntributed tt. Aloysius nal Universications inimes, Wall opinion ov


ector APACius brings d multi‐milns worldwleading maed and men Singaporcently a cotowards mholds a B. sity of Singnclude CISAStreet Jourver the last


C of Cloud to the Allllion enterpwide in his anagementntored varre and man‐editor for

many other Sc (Hons) gapore andA, CISSP anrnal and CIdecade.


Security Aliance exteprise securprevious rt consultinrious informny parts in Ar ISO/IEC 2security stand Maste

d is currentnd GCIH. HIO Magazin

RRUS-Cloud-S

lliance. He ensive experity and teoles as a Cng firms. Hmation secAPAC. He i27032 “Guitandards suer’s degreetly a doctorHis views ne as a trus

ecurity-4710127

also headserience gaiechnology pCSO for a THe is an accurity projes also activdelines foruch as ISO/es in Comprate candidare valuedsted indepe

7

s up ined pro‐Telco ctive ects, ve in r Cy‐/IEC uter date. d by end‐

7

Seop Ma

Ti

AbFobothtioorratSinthprinvwhBaanthTh

MaDeancoelsMaanAfnafoucoistToSe

econd sesperation,

ark Hoeks

tle: Forensbstract: orensic Tecoth public ae Forensic ons. Cloud rganisationther drastince there iese problerovider comvestigatorshilst privacased on then overview ese challenhe speaker

ark joined epartment. n Investigatmplex (Fosewhere inark is invond has lectufter a succeational, espunded his mbine the ts. ogether witervices unit


ssion – In

stra

sic Challeng

chnology isand privateIT expertsenvironmeal and legac way. s growing ms are higmmunity, cs. Each of thcy and secue ongoing eof the mainges may ber

Grant ThoMark’s is tions and Forensic IT)n the world.olved in setured at diffeessful careepecially regprivately hForensic T

th his Collet within Gra


ncident M

ges in the C

s getting me. Since tecs are used tents howeval challenge

need in invghly relevanloud usershem is in nurity remainefforts within challenge addresse

ornton in 2specialisedForensic IT Investigat. tting internerent Univeer within sgarding hisheld compaTechnology

eague Peterant Thornt


anageme

Cloud

more and mchnology eto technicaver, generaes are influ

vestigatingnt for all sts and third need of relin safeguardhin the framges identified in the fut

010 as pard in ForensT Specialistions pred

national stersities in Esome law e involvemeany on thy skills of h

r Schimmelon Netherl


ent, Inform

ore importevolves veral challengeate more thuencing the

g data withtakeholderparties suiable and leded. mework of ted and wilture.

rtner at thsic Technolt with ovedominantly

tandards reEurope on enforcemenent setting is subject. is company

l Mark nowands.


mation sh

tant withinry fast in thes with reshan technice work of a

hin all sortsrs in cloud uch as law egal access

the CIRRUSl discuss p

e Forensic logy / E‐diser 20 yearsworking

egarding Fthis subjecnt agenciesup High TAfter somy with Fore

w heads the

RRUS-Cloud-S

haring an

n the inveshe last coupect to thecal challenga Forensic

s of fact finenvironmeenforcemes to the dat

S project, Mpotential av

& Investigscovery ses of experiin The Ne

orensic IT ct. both natioTech crime me years Maensic Accou

e Forensic &

ecurity-4710127

d Global

tigative wople of decaeir daily opges alone; IT expert

nding missients: the clent and privta in the clo

Mark will shvenues on h

gating Servrvices. Marence involvetherlands

Investigat

onal and in units, Mark decideuntant spe

& Investiga

7

Co‐

orld, ades pera‐also in a

ions, loud vate oud,

hare how

vices rk is ving and

ions

nter‐Mark d to cial‐

ation

8

Ta

Ti

Cl

Ab IT to‐copeMocoanpasoAdmomoto ReWhoto

Th

TasppuSeoffspLoingATSoAPcegrcu10ag

arry Singh

tle: oud gover

bstract:

is typically‐market stmpetitive ecially arouoving frommponent ond authentiarts of the I managed bdopting cloost constituodel. This align. eporting thhat shouldow will it behave a che

he speaker

arry has ovpected technuting, Virtuervices in Afices in Gepirit for Eurondon, Unitg on outsoTOS (formeourcing straPAC. He estrtified proam and asustomers. In0 years of cger working


rnance: Wh

y troubled rategy andspace, Clouund agility am on‐premisof the technication techIT solution by several ud means uents and amakes inte

hen become be reportee allocatedeck on cont

r

ver 20 yearnology proualization aAmsterdamrmany) wiropean clieted Kingdourcing of Ierly Atos Oategy to extablished afessionals ssessing exn 2009 he gcontributiog in Infrast


ho has the

with mundd wants to ud computiand cost. se to a clounology stachnologies nspace residvendors. accepting lany high degration a

es a key issed and whe across thetrols and m

s of experiofessional oand Social C, The Netheith sole focents. Previom. QS AdviT services.Origin/KPMecute projeand furtherin EMEA axisting Datagot award on to virtuatructure, U


control in

dane tasks implementing offer at

ud environck, it also suneed to be de on‐prem

loss of contegree of cucomplex in

sue in suchen must it be cloud? SLAmetrics.

ence in muon emerginComputingerlands It icus on knoously, he wisory is a m. He was alMG) ; Utreects/operar developedand up to 4a Centers gand a persalization coUniversity G


n the cloud

while the t key solutttractive be

nments invoubtly out‐tareconfigur

mise while t

trol. A Clouustomizationitiative inv

h deploymebe reportedA integrati

ultiple indung trends ang. Currentlyis a Europeowledge, grwas Engagemmanagemenlso directorcht, The Nations by utd virtualiza40 in Indiaglobally to sonal recogommunity. Groningen,


d?

business wtions to remenefits to b

olves moreasks many red to fit athe rest are

ud vendor won which covolving tw

ents. We wd? How shoon is key b

ustries. He nd technoloy, he is Manean firm barowth, quament Direcnt‐consultinr ‐ EMEA BNetherlandstilizing Virtation divisia, pioneerindevelop a

gnition as VPrior to 2The Nethe

RRUS-Cloud-S

wants to hamain compbusiness st

e than justduties. Ro

a distributee in the Clo

will addresounteracts o separate

will discuss ould risk bebut must be

is thought‐ogies such naging Parased in Nethlity, flexibictor Europeng firm speBusiness Des, where htual Teamsion and greng Cloud C SaaS stratVMware vE007, he waerlands, as

ecurity-4710127

ave a fasterpetitive. In akeholders

t outsourcioles, procesed stack whoud and it i

ss the needtheir busin

e parties try

issues suce mitigated e implemen

‐leader andas Cloud Crtner/CEO, herlands (wility and tee, QS Advisecifically foevelopmenhe establiss from EMEew team toomputing ptegy for glxpert 2009as Senior Mwell as Se

7

r go‐this s es‐

ng a sses, here s al‐

ds of ness ying

h as and nted

d re‐Com‐O&I with eam‐sory; cus‐nt, at shed EA & o 70 pro‐obal 9 for Man‐nior

9

CoboerSe(DDe

Ik

Ti

DaAbMonomiUnYato syupprAltweerof Wlem Th

IkujoiLaMaNeFa

Th

onsultant aorg Shippinational MaeaTrade (NDenmark/Bevelopment

kuo Takaha

tle: ata Loss anbstract: ore and moot limited toit in cloud cnder such cahoo! Japanupgrade th

ystem. Accopgrading prrocedure. though thee have to los are held ldata leakae are goingms in Japan

he speaker

uo Takahains the Infoawyer in Chayu is a meetwork Lawaculty of La

hird sessi Join the CIto stay upd

at Pecoma; ng; Groninganagement Netherlandsrasil) etc. Ht, Mumbai

ashi & May

d Leakage

ore compao private scomputing circumstann lost data bhe serversording to throgram aga

ere are no look into legliable for thge. g to discusn and other

r

shi is one ormation Nhief of BLT ember of Clw Associatiw, and has

on – ClouIRRUS Linkedinated on the sec

Amsterdamgen, The Neroles in Os), NYK (JaHe receivedUniversity,

yu Arimoto

by Cloud P

nies are usectors, butlike “G Cloces, in Junebelonging t. The firm he investigainst securi

awsuits filegal challenhe damages

ss these legr countries

of the founNetwork LaLegal Chamloud Securion, based been an at

ud Certificn group at httpscond workshop a

m, The Neetherlands.Oil, Gas & Tapan), AELd B.Sc degr, India.

o

Providers (L

sing cloud t governmeoud” in Brite 2012, Firto more thalso lost thgation commity vulnera

ed against nges in thess, to what e

gal challen.

nders of Claw Associambers and City Alliancein Tokyo, Jttorney.

cation ://www.linkedinand future CIRR

therlands ,. In the perTransportaL/NSSPL (Sree from LB

Legal Studi

as storageental organtain. stServer, ahan 5,000 che backup mittee, theability and

the firm rese data lossextent, etc.

ges and th

loud Securiation, basedCEO of resee Japan ChaJapan. She


, Project Mriod 1991 ‐ation SectoSingapore/BS School o

es on First

e for their dnizations ar

a rental servompanies wdata and we loss was cthe inappr

egarding ths cases: in wBesides, pr

he measure

ity Allianced in Tokyoearch firm apter and agraduated

RRUS-Cloud-S

Manager at ‐2000 he haor for EmplUSA), AP Mf Advanced

Server Cas

data in recre also beg

ver providwhen the fwas unablecaused by opriate up

his data losswhich caserivacy issue

es to addre

e Japan Cho, Japan. HeIT Researcalso joins th the Unive

ecurity-4710127

Royal Wagad various loyers suchMoller Maed Research

e)

cent years. inning to c

er operatedfirm attemp to rebuildthe bug indate opera

s up until ne cloud proes arise in c

ess these p

apter and e is the Leah Art. he Informarsity of To

7

gen‐Op‐h as ersk and

It is com‐

d by pted d the n the ating

now, ovid‐case

rob‐

also ader

ation kyo,

10

Al

Ti

CaAb

ClotutyevicceagafttifcuTh

AlsepeclothgrHeHeno Yo

Ti

So Ab

BusenatifussoLase

ain Panne

tle:

an monitoribstract:

oud Securite with a gear. If succeces, as it anrtification gile supply ter it has bfication wituss some idhe speaker

ain Pannetarch contriean R&D inoud compue French doup of the e started hie received ovel cryptog

onosuke H

tle

omething m

bstract

usiness uselect cloud ame, compafication/qused as the cft, Amazonast June, mrvice by tro


etrat

ing be used

ty Alliancegoal of provessful, this snswers a loscheme, it chain maneen deliverth constanteas and char:

trat is a Seibutions innitiatives. Huting and sdata protecArticle 29 is career asa PhD in Cgraphic pro

Harada

missing in C

er faces witprovider bany reputatalification criteria for n, Google Apmore than 6oubles of a


d to create a

recently eviding a thischeme couong standinalso raisesnagement, wred? We prt monitorinallenges th

enior Resean national aHe is a secsmart‐cardsction authoWorking Ps an IT SecComputer Sotocols for

loud Provi

th difficultby price, qtion, and/oof the prousers to trps are alrea6,000 Japaa cloud prov


a "permane

entered in aird party cluld be a strng demand questions.what is theropose to inng tools to hat lie along

archer at Cand EU fundcurity and s. He previority, and wParty, whichurity consuScience afteIP multica

der Certific

y for outsouality of sor SLA. Oneovider befust provideady certifienese SMEsvider servi


ent certifie

a partnershloud certifirong enablefrom cloud. In the wore value of anvestigate tprovide a g the way.

Cloud Securded projectprivacy exiously worwas an activh informs Eultant specer conductist security

cation

ourcing IT ervice, infoe of the besfore contraers. Now med with ISMs experiencce. The pro


ed cloud"?

hip with thcation framer for the dd customerrld of rapida certificatethe idea of permanen

rity Alliancts as well axpert, specked as a ITve membeEuropean pcialized in bing researc.

environmeormation sst selectionacting. ISMmany cloud MS. ced uninteovider repo

RRUS-Cloud-S

e British Stmework bydevelopmenrs. Yet like ad technologe one monf coupling tnt certified

ce. He suppas in cross‐cialized in T Specialisr of the Tepolicy on dbank smartch at Institu

ent. It is nosecurity me ways is to

MS certificaproviders

nded disruorted that t

ecurity-4710127

tandards Iny the end ofnt of cloud any traditiogy changes nth or one ythird party cloud. We

ports CSA'sindustry Eucryptograt for the Cechnology Sata protectt‐card systeut Eurecom

ot easy howeasures, br check the ation is wisuch as Mi

uption of tthey delete

7

nsti‐f the ser‐onal and year cer‐dis‐

s re‐uro‐phy, NIL, Sub‐tion. ems. m on

w to rand cer‐dely icro‐

their d all

11

this tecbarehaMaerThcoThficCSextabsh Th

CuYo(Nsitof acNewhIn arFoanScritbureUnAltioSe

Ma

Ti

e stored dacertified wction contrackup in loquire backave not beeany potents because hose users untability this paper fication scheSA) and assxpectation able for usehould more

he speaker

urrent Job Tonosuke HaNippon Telety Faculty oExchange tivities as etworks In hich includlate 1999,m of NTT, wor academind Meiji Unhool of Insty Managemusiness malated topicniversity anso, he wasonal Vice precurity stan

anuel Garc

tle: Cloud


ata includinwith both ISrols). Somecal environkup controln banned itial SMEs seof lack of ihave veryto their cusrst Introdumes. We alsurances (eand reality er to knowfocus on fi

r

Title: Profearada has sephone andof EngineerSystem frowell as ser90s, his mdes Informa, he movedwhere he pc carrier, hniversity frstitute of Inment, IT annagement cs at other nd, Ferris G the presidresident frondardizatio

cia Sanche

Certificati


ng backup bSMS and P‐me SMEs wenment. Thel proceduremmediateleeking clouinformatioy disappoinstomers wiuces the inclso surveyee.g. SOC). Thof those se

w its achievilling the ga

ssor of thestarted his d Telegrapring. His mom congestrvices and ajor activitation Securd to InfoCoparticipatedhe teaches rom 2005, nformationnd Securityfor InformuniversitieGirls Univerdent of ISAom 2008 ton activities

ez

ion and Pe


by a serioumark (domere not abley trust pres at the coly nor stoppud servicesn security nted againith outsourcident stateed existinghen we diservices. Weved level ofaps betwee

Graduate Scarrier as h) after finmajor concetion of callsproducts dty areas arerity Manageom Researcd in InformRisk Manabefore he

n Security iny Auditing

mation secues such as rsity. ACA Tokyo o 2010. He s since 200

ersonal Da


us mistake omestic certifle to continoviders' ISontract. hoped. s have hesimanagemenst “Certificrcing. ed above an certificatioscusses pere conclude f security. en user per

School of InIT researchnishing posern area was. He also hdevelopmee to develoement and ch Labs, whmation securagement at became fun 2010. He, IT Assuraurity. He is Graduate S

chapter fris also con8 until now

ata Protect


on operatiofication fornue their eSMS and P‐owever, the

itated to coent for datcation” as

nd states itons, assurirception gathat certifiThus certiception an

nstitute of Ih engineer st‐graduateas to remohad participent projectsop InformatInformatiohich is the rity consult Osaka Unfull time pre is now teaance and ITalso teachSchool of N

om 2001 ttributing ISw.

tion

RRUS-Cloud-S

on, althougr private infe‐services ‐mark certie providers

ontract witta deletion assurance

s impact tong servicesaps existingication servification sed expectati

Informatioat Researce course at otely monitpated in ses for Telection securiton Securitythink tankting and auiversity Grrofessor ataching InfoT Governahing InformNippon Un

to 2003, anSO/IEC SC2

ecurity-4710127

gh the provformation pdue to lacification whs' certificat

h such proand exposand clear

o existing ces (e.g. STARg between uvices are inervice provion.

on Security ch Labs of NKyoto Unitor and coneveral reseacommunicaty architecy Technologk and reseauditing. raduate Cout the Graduormation Sance as welmation Secuiversity, Cy

nd the Inte27 Informa

7

vider pro‐ck of hich ions

ovid‐sure. r ac‐

erti‐R by user nevi‐vider

NTT iver‐ntrol arch ation ture gies. arch

urse uate ecu‐ll as urity yber

rna‐ation

12

Th

MajoiAuSuanmevaW

he speaker

anuel Garcined the Spuditor and,upervisor, and judicial eetings of facy and datorking Par


r

ía holds a Dpanish Dat after a secas a membcooperatioformal worta protectioty.


Degree in Eta Protecticondment ber of the Ion and issrking grouon issues, p


Economics on Authorin BrusselsInternationues relatedps at Europparticularly


and a Masrity in 200s working nal Departmd to new pean and iy those link


ster Degree2, first as with the Ement with technologiinternationked with th

RRUS-Cloud-S

e on ICT Maa Data InsEuropean Dresponsibies. He regnal level dehe tasks of

ecurity-4710127

anagementspector andData Protecilities in pogularly atteealing with f the Article

7

t. He d IT ction olice ends pri‐e 29

13

second cirrus workshopcloudaccountability.eu/sites/default/files/programme final.pdfcertification,...

Documents