EMERALD: Evidence Management for Continuous Certification as a Service in the Cloud

Christian Banse, Björn Fanta, Juncal Alonso, Cristina Martinez

2025

Abstract

The conspicuous lack of cloud-specific security certifications, in addition to the existing market fragmentation, hinder transparency and accountability in the provision and usage of European cloud services. Both issues ultimately reflect on the level of customers’ trustworthiness and adoption of cloud services. The upcoming demand for continuous certification has not yet been definitively addressed and it remains unclear how the level ’high’ of the European Cybersecurity Certification Scheme for Cloud Services (EUCS) shall be technologically achieved. The introduction of AI in cloud services is raising the complexity of certification even further. This paper presents the EMERALD Certification-as-a-Service (CaaS) concept for continuous certification of harmonized cybersecurity schemes, like the EUCS. EMERALD CaaS aims to provide agile and lean re-certification to consumers that adhere to a defined level of security and trust in a uniform way across heterogeneous environments consisting of combinations of different resources (Cloud, Edge, IoT). Initial findings suggest that EMERALD will significantly contribute to continuous certification, boosting providers and users of cloud services to maintain regulatory compliance towards the latest and upcoming security schemes.

Paper Citation

in Harvard Style

Banse C., Fanta B., Alonso J. and Martinez C. (2025). EMERALD: Evidence Management for Continuous Certification as a Service in the Cloud. In Proceedings of the 15th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER; ISBN 978-989-758-747-4, SciTePress, pages 190-197. DOI: 10.5220/0013348100003950

in Bibtex Style

@conference{closer25,
author={Christian Banse and Björn Fanta and Juncal Alonso and Cristina Martinez},
title={EMERALD: Evidence Management for Continuous Certification as a Service in the Cloud},
booktitle={Proceedings of the 15th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER},
year={2025},
pages={190-197},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0013348100003950},
isbn={978-989-758-747-4},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 15th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER
TI - EMERALD: Evidence Management for Continuous Certification as a Service in the Cloud
SN - 978-989-758-747-4
AU - Banse C.
AU - Fanta B.
AU - Alonso J.
AU - Martinez C.
PY - 2025
SP - 190
EP - 197
DO - 10.5220/0013348100003950
PB - SciTePress