Technology industry urges G7 to standardize cloud security standards

A leading technology industry group on Tuesday called on G7 countries to harmonize cloud security certifications across the world's richest countries, in a bid to boost cooperation and counter calls for data to remain within national borders.

Industry group BSA The Software Alliance, which represents technology giants including Microsoft and IBM, says its initiative will reduce compliance burdens for cloud providers while maintaining strong security standards.

“We encourage governments to look at areas where their cloud requirements are actually similar, but using different language,” said Aaron Cooper, senior vice president of global policy at BSA.

He added that strengthening unity among G7 countries could also lead to “the recognition that localization does not help achieve security.” “But that's not specifically what this proposal is about.”

The G7 countries are the United States, Britain, Canada, Japan, and the European Union member states France, Germany, and Italy.

Reliance on cloud computing, rather than companies or governments running software on-site, is the new reality of computing.

This has been further enhanced in recent years due to the extensive processing required to provide AI capabilities, with few companies able to single-handedly provide the necessary data infrastructure.

The growth in cloud computing has prompted governments around the world to implement cloud security certification requirements to mitigate risks associated with widespread cloud adoption, such as cyberattacks, data theft, or legal problems.

While these certifications have much in common, some countries, particularly G7 member France, insist that cybersecurity standards come with strict geographic requirements so as not to leave sensitive or private data in foreign hands.

France's stance has helped delay the EU's long-promised cybersecurity standard, known as EUCS, with several EU member states opposing the Paris Agreement.

The BSA also opposes this position, arguing instead that cybersecurity agencies in friendly countries should find ways to cooperate.

Close cooperation can also provide cloud companies with easier market access and provide customers with a wider range of secure cloud options, the BSA said.

BSA members also include Oracle, Siemens, and OpenAI, which makes ChatGPT.

© 2024 Agence France-Presse