AmCham Poland’s position paper in the consultation on the update of the Cloud Computing Cyber Security Standards (SCCO)

AmCham Poland took part in the public consultation on the revision of the Cloud Computing Cyber Security Standards (SCCO). The document, although not an act of generally binding law, is the most important set of guidelines on security standards for the use of cloud solutions in public administration. In our position paper, we presented a set of postulates of a technical nature, which aim to adapt the new version of the document to market realities. Among other things, we drew attention to:

1) The need for terminological consistency in the use of the terms “data” and “information”,

2) Proposals to modify the nomenclature and detailed standards within each level of security requirements,

3) Problems arising from reference to undefined terms such as “data sovereignty” or “control over technical personnel”.

Our full position paper can be read here.

Following SCCO’s public consultation, AmCham also held a meeting with Mr. Marcin Wysocki, Deputy Director of the Cyber Security Department at the Ministry of Digitization, where, in addition to cloud standards, we also raised issues of the implementation of the NIS 2 Directive and the European Cloud Certification Scheme.