OCP and SESIP: Envisioning Scalable Security Framework to Streamline CRA Compliance for Data Centres

This conference talk explores how the Open Compute Project (OCP) can leverage the Security Evaluation Standard for IoT Platforms (SESIP) to demonstrate compliance with the EU's Cyber Resilience Act (CRA) for data centers. Presented by Jeremy O'Donoghue from GlobalPlatform and Christian Walter from 9elements GmbH, the 20-minute presentation examines the regulatory landscape for cybersecurity in the EU, particularly focusing on services supporting privacy or security functionality. Learn about how cloud-based products performing Remote Data Processing will require security certification under schemes being developed by ENISA, and discover the potential for OCP S.A.F.E to use SESIP as a compliance framework. The talk also covers GlobalPlatform's related initiatives in software OTA, supply chain protection, platform traceability, Root of Trust, and threat models.