Certificates and test reports – which certificate states what? (Video)

In this article you will read about,

• Which certificates and test reports exist,
• what they stand for,
• and which requirements the Open Telekom Cloud fulfills in addition.

The cloud creates a future-proof and innovative foundation for internal and external business applications. The prerequisite for companies and their customers: secure data processing in accordance with data protection regulations. When searching for suitable cloud providers, companies come across numerous certificates and test reports. Due to the various reports and evidence, it is easy to lose track of what they say.  

Certificates and test reports serve as proof of compliance with certain specifications and regulations. These are internationally recognized standards that equally apply to all providers. Independent testing companies verify the individual suppliers. Examples of tested aspects include information security, data center security, compliance with the General Data Protection Regulation (GDPR), company structures and processes as well as sustainability aspects.

ISO 27017 and ISO 27018 are examples of standards in the cloud environment relating to the relationship between customers and cloud service providers as well as data privacy for personal data in the cloud. Furthermore, there are SOC reports that are created annually and verify that the so-called Trust Service Criteria are ensured. An additional central test report is the C5 criteria catalog specified by the German Federal Office for Information Security (BSI), which defines the minimum requirements for information security for cloud services. The EU Cloud Code of Conduct was developed in order to create an environment for trust and transparency in the European cloud computing market. In addition, there are a multitude of other certificates.  

In the video, you will learn about the certificates and test reports that the Open Telekom Cloud has, why they are so important, and what they declare.

The Open Telekom Cloud also provides a secure way to process data in the cloud to companies that belong to critical infrastructure. Two twin-core data centers in Germany and the Netherlands meet the BSI’s minimum requirements for georedundant storage. The use of OpenStack reduces vendor dependency and makes it easier for companies to switch to other OpenStack-based clouds. Furthermore, the Open Telekom Cloud meets specific industry provisions for securely processing the data of professional secrecy holders in accordance with § 203 of the German Criminal Code (Strafgesetzbuch – StGB) and social benefit providers in accordance with § 35 of the German Social Code I (Sozialgesetzbuch I – SGB I). The Open Telekom Cloud offers “compliance inside” – i.e., complications due to Schrems II or the U.S. Cloud Act are prevented in advance.