Cloud Security Made for the EU: Securing Data & Applications
summary
Panel argues confidential computing plus a middleware layer (enclaive) lets companies run encrypted code and data on public clouds with 3–5% overhead, removing specialist cryptography needs and enabling SaaS to run as private tenants (example: a confidential Nextcloud deployment for German social welfare). Continuous compliance scanning and verified controls (Mitigant/Resility) detect misconfigurations, map to ISO standards, and offer automatic remediation. A trustworthiness model with seven attributes and a company commitment/index is proposed to signal integrity and competence to customers.
AI-written summary · about
chapters (10)
- 0:00Introduction to cloud security
- 3:20Confidential computing explained
- 7:13Continuous compliance monitoring
- 8:38Trustworthiness in IT services
- 14:12Setting up confidential computing
- 26:00SaaS in confidential cloud
- 30:15EU vs US cloud regulations
- 34:55Avoiding cloud fragmentation
- 39:22Cloud standards and resilience
- 47:41Key takeaways and closing
related talks
20mThe Transformational Power of Confidential Computing
45mConfidential Computing: Protecting Customer Data in the Cloud
23mConfidential computing: from niche to mainstream
27mConfidential Tenancy: Towards Digital Sovereignty on Public Clouds
11mLightning Talk: Computing Confidentially in the Clouds
40mDon’t Trust Opaque Clouds, Cryptographically Verify Instead!
38mState of Cloud Sovereignty: From Public Clouds to Confidential Clouds
31mConfidential Containers – Sensitive Data and Privacy in Cloud Native Environments