Sovereignty Spotlight: EU Regulations and the...
summary
Fast rundown of what matters: maps DORA, NIS2 (enforced 2024), EUCS and the AI Act (baseline rules set for 2027) to concrete controls—third‑party exit plans and reversibility, SBOM and VEX for supply‑chain truth, and sigstore‑based signing with Merkle‑tree transparency plus CVE/CVSS scoring. Shows deployed artifacts: French SecNumCloud and CIS‑11 certified stacks, 17 French providers claiming compliance (only one Kubernetes provider certified), and recommends architecture choices and testing patterns for workload mobility and auditable resilience.
AI-written summary · about
chapters (12)
- 0:00EU regulatory sovereignty
- 2:27Why EU sovereignty matters
- 4:15Key EU regulations
- 7:09Security and resilience
- 12:48Open source transparency
- 16:39Four pillars of tech sovereignty
- 20:10Security tools for compliance
- 24:22Supply chain with Sigstore/SPIFFE
- 27:54Access strategies and cloud exit
- 30:46French sovereign cloud example
- 34:41German cloud criteria
- 37:33Closing remarks and Q&A
related talks
15mEuropean Cybersecurity Regulations who's who
01h 05mDigital Sovereignty in Wartime: Legal and Cybersecurity Considerations
01h 12mCYBERSECURITY FOR EUROPE: FOSTERING RIGHTS THROUGH TECHNOLOGY
52mHow Sovereign Solution Providers are Securing Europe’s Digital Borders?
53mOpen by Choice, Sovereign by Design
28mFOSS and Security Risk Management
59mMerging Security and Compliance: Perspectives on Emerging Regulations and Best Practices
52mStandards on the Horizon: What Matters Most?