Evidence Management for Continuous Certification as a Service in the Cloudcore
EMERALD · Horizon Europe grant · 2023-11-01–2026-10-31
EC contribution
Total cost
Beneficiaries
About the data
Source: CORDIS (official EU open data), Horizon Europe. Framework HORIZON · call HORIZON-CL3-2022-CS-01 · scheme HORIZON-IA · topic HORIZON-CL3-2022-CS-01-04. CORDIS record →
Objective
Cloud-based services have grown from basic computing services to complex ecosystems, comprising (virtual) infrastructure, business processes and application code. These advanced services also increasingly leverage the usage of Artificial Intelligence, including Machine Learning or Natural Language Processing techniques, raising the complexity even higher. Due to the cascade of dependencies among the different products and services, the need arose to bring more agility to the certification process of cloud-based services, e.g., using continuous monitoring and assessment, as evidenced by references to it in the certifications of the EU Cybersecurity Act (EU CSA). To transform the continuous assessment and certification concept into the complete realization of a Certification-as-a-Service (CaaS), several challenges need to be solved: 1) current proposed proofs of concepts for continuous monitoring lack interoperability at technology level, 2) the adoption of cloud and edge computing and the incorporation of regulations on specific topics or domains, such as AI, put significant strain on companies to comply with a multitude of different security schemes, 3) existing market fragmentation for continuous certification (scope, methodologies), hinder transparency and accountability in the provision of European cloud services, 4),smart tools and models need to be adopted to ease the agile application and implementation of the CaaS concept reducing complexity in the whole cloud certification value chain easing the adoption of CaaS by the different stakeholders. To overcome these challenges, the design and implementation of the EMERALD CaaS solution leverages the H2020 project MEDINA’s outcomes and advances them to TRL 7 in the EMERALD core. Two PoCs will be provided; one for composite certification and one for mapping requirements to upcoming AI certification schemes. EMERALD will pave the road towards CaaS for continuous certification of harmonized cybersecurity schemes.
Beneficiaries (13)
| Organisation | Country | Role | EC contribution | SME |
|---|---|---|---|---|
| FUNDACION TECNALIA RESEARCH & INNOVATION | ES | coordinator | €738,375 | |
| FRAUNHOFER GESELLSCHAFT ZUR FORDERUNG DER ANGEWANDTEN FORSCHUNG EV | DE | participant | €859,000 | |
| SOFTWARE COMPETENCE CENTER HAGENBERG GMBH | AT | participant | €573,500 | |
| KNOW CENTER RESEARCH GMBH | AT | participant | €478,250 | Yes |
| OPENNEBULA SYSTEMS SL | ES | participant | €379,925 | Yes |
| CONSIGLIO NAZIONALE DELLE RICERCHE | IT | participant | €308,200 | |
| Fabasoft Research GmbH | AT | participant | €290,959 | |
| FABASOFT R&D GMBH | AT | participant | €270,528 | Yes |
| IONOS SE | DE | participant | €267,925 | |
| NIXU OY | FI | participant | €196,350 | |
| CLOUDFERRO SA | PL | participant | €191,240 | Yes |
| CAIXABANK SA | ES | participant | €182,175 | |
| CAIXABANK TECH SL | ES | thirdParty | €0 |
Get the DFM funding briefing — free
New EU defence calls, tenders and awards in your inbox.
Defence Finance Monitor is an analytical and informational product. Grant data is official CORDIS; payment and subscription happen on DFM Analysis.