Automating Certification Decisions

by Immanuel Kunz (FhG) | Aug 23, 2022 | MEDINA Framework, MEDINA Solution

MEDINA supports Cloud Service Providers and Auditors in the certification process at various stages, including collection, assessment, storage, and management of evidences. Apart from this, we aim at automating the derivation of a certification decision based on the...

MEDINA SSI-based cloud security certification management

by Cristina Regueiro (TECNALIA) | Jul 28, 2022 | MEDINA Framework, MEDINA Solution

Nowadays, the legal entity that performs a conformity assessment of Cloud Service Providers (CSP) against relevant regulations and standards is the Conformity Assessment Body (CAB). It carries out audit following the required regulations. Once the audits are...

An architecture proposal for the MEDINA framework (Whitepaper)

by Iñaki Etxaniz (TECNALIA) | May 12, 2022 | MEDINA Architecture, MEDINA Framework, Publications

The MEDINA partners have produced a joint white paper, entitled “An architecture proposal for the MEDINA framework”, which focuses on the description of the software and hardware architecture of the MEDINA framework, which has been designed and implemented...

Making it automated: the MEDINA Framework on dev

by HPE | May 10, 2022 | MEDINA Framework, MEDINA Solution

This first version of the MEDINA framework is a prototype integrating all components with the core functionalities implemented. To carry out the integration of the components, the DevOps strategies and CI/CD principles have been adopted, with a strong focus on...

Integrating an Existing Security Analysis Tool in the MEDINA Framework

by Immanuel Kunz (FhG) | May 6, 2022 | MEDINA Framework, MEDINA Solution

MEDINA integrates different types of evidence collection tools to enable a comprehensive assessment of a cloud service’s security level. This is important for several reasons: First, security certification catalogs cover different layers including the infrastructure,...

Making it work: the MEDINA Architecture

by Iñaki Etxaniz (TECNALIA) | Mar 31, 2022 | MEDINA Architecture, MEDINA Framework

The main objective of MEDINA is to provide a tool for CSPs (Cloud Service Providers) that allows them the achievement of a continuous auditing and certification of Cloud Services aligned to the EU Cybersecurity Act, all this in an automated and almost real time...