2024评估云信任的技术和法律标准研究报告 英文版 .docxVIP

TechnicalandLegalCriteriaforAssessingCloudTrustworthiness

NIGELCORY|APRIL2024

Globaldataandtechnologygovernancewillbechallengingwithoutcooperationoncloudtrustworthiness.Policymakersshouldavoidsimplisticassessmentsbasedonnationalityandinsteaddevelopmoreholisticassessmentsbasedonlegalandtechnicalcriteria.

KEYTAKEAWAYS

?Concernsabouttrustingcloudserviceshaveexistedsincetheircreation,butrecentconcernsaboutgovernmentscompellingaccesstocloudfirms’dataandservicesareleadingtomisguidedknee-jerkreactionsbasedonnationality.

?Focusingsolelyonafirm’snationalitywithoutconsideringhowafirmoritshomecountrycontributestoordetractsfromcloudtrustworthinessdoeslittletoenhancecloudcybersecurityanddataprivacyandcreateanopenandcompetitivecloudmarket.

?Chinaloomsovercloudtrustworthinessassessments,butit’smuchbroader.G7andlike-mindedcountrieshaveamixedrecordwithpoliciesthatbothfracturethecloudandprovidethebasisforamorecooperativeapproachtocloudtrustworthiness.

?PolicymakersattheG7,OECD,andelsewhereshouldestablishtechnicalandlegalcriteriaforevaluatingcloudtrustworthinessratherthanrelyingonvaguenationalsecurityandintelligenceconcerns.

?Ifcountriestrusteachotherincontextssuchasdefense,intelligence,lawenforcement,andtrade,buttheydon’ttrusteachother’scloudfirms,thenhowaretheysupposedtoworktogether,andwiththirdcountries,onothertechissues?

?Adiversesetoflegalandtechnicalcriteriagivesfirms,andtheirhostcountries,acleargoaltoworktoward.ConcernsaboutcloudtrustworthinessareglobalandnotjustanissuefortheEuropeanUnion,theUnitedStates,andChina.

CONTENTS

KeyTakeaways1

Introduction3TrustedCloudIsCriticaltoGlobalData,Cybersecurity,andTechnologyGovernance7CountryCaseStudies8Australia’sCriticalInfrastructureActandHowOneProblematicFirm