Key organisations express concerns over the Cybersecurity Certification Scheme for Cloud Services

AmCham EU issued a joint statement alongside key EU digital business organisations to express concerns over several procedural and substantial elements in the Cybersecurity Certification Scheme for Cloud Services (EUCS) currently undertaken within the European Union Agency for Cybersecurity (ENISA). While the EU's ambition to tackle global cyber threats and protect citizens, institutions and businesses through cybersecurity certifications is appreciated, the inclusion of 'digital sovereignty' requirements risks negatively impacting international and European providers of cloud computing solutions as well as organisations that use cloud and require high levels of cybersecurity assurances.

News
13 Jun 2022
Digital
Key organisations express concerns over the Cybersecurity Certification Scheme for Cloud Services

AmCham EU issued a joint statement alongside key EU digital business organisations to express concerns over several procedural and substantial elements in the Cybersecurity Certification Scheme for Cloud Services (EUCS) currently undertaken within the European Union Agency for Cybersecurity (ENISA). While the EU's ambition to tackle global cyber threats and protect citizens, institutions and businesses through cybersecurity certifications is appreciated, the inclusion of 'digital sovereignty' requirements risks negatively impacting international and European providers of cloud computing solutions as well as organisations that use cloud and require high levels of cybersecurity assurances.

The potential inclusion of 'digital sovereignty' requirements will create complex legal compliance procedures, create obstacles to information sharing, give rise to significant entry barriers for companies and will not necessarily increase levels of cybersecurity. The EUCS discussions have been characterised by limited transparency and lack of stakeholder engagement. Moreover, the different Member States' positions on this issue might result in Single Market fragmentation, should these provisions be adopted. Thus, the signatories urge ENISA and the European Commission to inform and engage with stakeholders throughout the EUCS finalisation process to prevent it from carrying unnecessary and discriminatory requirements.

Related items

News
28 Jan 2026

Choose France, choose the future

Cisco is strengthening France’s role in the global digital economy with the launch of its Global AI Hub, announced at the 2025 Choose France Summit. The hub will focus on secure, energy-efficient artificial intelligence (AI) infrastructure, innovative cooling solutions for data centres and support for the startup ecosystem. To address future workforce needs, Cisco will also train 230,000 people in France over the next three years through its Networking Academy, covering fields such as cybersecurity, data science and AI. Building on nearly 400,000 individuals already trained in France, this investment supports Cisco’s EU-wide commitment to train 1.5 million people by 2030. Read more on Invested in Europe. 

Digital
Read more
Read more about Choose France, choose the future
News
21 Jan 2026

Cybersecurity Act review: AmCham EU calls for greater industry engagement and evidence-based certification criteria

The European Commission’s proposal to revise the Cybersecurity Act (CSA2) comes at the right moment, as Europe faces an evolving range of cyber threats. With its measures to reinforce ENISA and make harmonisation the key to a more resilient Single Market, the proposal brings the Act closer to the realities of today’s fast-moving cybersecurity ecosystem. 

However, the Commission’s proposal still fails to go far enough on providing a platform for more active industry engagement. It rightly formalises existing structures but falls short of creating mechanisms that allow for regular expert-level exchanges and meaningful industry feedback into the CSA2 framework, building on lessons learned from the past years. Such exchanges are essential, given industry’s role as a front-line defender against cyber threats. 

Now, as the file moves to the European Parliament and the Council of the EU, the co-legislators must ensure certification schemes under the CSA2 remain based on technical criteria. The EU’s cybersecurity needs should be a matter for sober, technical analysis. AmCham EU therefore supports the proposal's structural distinction between technical certification and non-technical supply chain risks. Maintaining this separation prevents restrictive requirements that limit choice, reduce competition and slow innovation. 

The same approach is necessary for the proposal’s provisions to secure critical infrastructure under the new ‘Trusted ICT Supply Chain Framework’ (Title IV). These measures must also be underpinned by an objective, evidence-based approach to ‘non-technical risks’. At the same time, measures involving restrictions on data transfers must be aligned with international agreements to avoid unintended disruptions to global operations. 

Ultimately, US companies share the EU’s commitment to securing the region’s digital resilience. AmCham EU members invest heavily in security and stand ready to support the delivery of a framework that keeps Europe open, secure and competitive. 

Digital
Read more
Read more about Cybersecurity Act review: AmCham EU calls for greater industry engagement and evidence-based certification criteria
News
14 Jan 2026

Irish-made AI

Developing advanced artificial intelligence (AI) capabilities is central to Europe’s digital ambitions. With a new €175 million investment, Workday is reinforcing this priority by establishing an AI Centre of Excellence in Dublin. Building on its long-standing research and development presence, the company will expand product development and create more than 200 specialised roles. Workday is also deepening its commitment to skills, partnering with national training networks and universities to equip employees with cutting-edge AI expertise. Through these collaborations, Workday is helping to drive innovation, strengthen Europe’s digital competitiveness and support the next generation of AI talent. Discover more on Invested in Europe. 

Digital
Read more
Read more about Irish-made AI