ITIF-评估云可信度的技术和法律标准（英）-2024.4-42页

TechnicalandLegalCriteriaforAssessingCloudTrustworthinessNIGELCORYAPRIL2024Globaldataandtechnologygovernancewillbechallengingwithoutcooperationoncloudtrustworthiness.Policymakersshouldavoidsimplisticassessmentsbasedonnationalityandinsteaddevelopmoreholisticassessmentsbasedonlegalandtechnicalcriteria.KEYTAKEAWAYSConcernsabouttrustingcloudserviceshaveexistedsincetheircreation,butrecentconcernsaboutgovernmentscompellingaccesstocloudfirms’dataandservicesareleadingtomisguidedknee-jerkreactionsbasedonnationality.Focusingsolelyonafirm’snationalitywithoutconsideringhowafirmoritshomecountrycontributestoordetractsfromcloudtrustworthinessdoeslittletoenhancecloudcybersecurityanddataprivacyandcreateanopenandcompetitivecloudmarket.Chinaloomsovercloudtrustworthinessassessments,butit’smuchbroader.G7andlike-mindedcountrieshaveamixedrecordwithpoliciesthatbothfracturethecloudandprovidethebasisforamorecooperativeapproachtocloudtrustworthiness.PolicymakersattheG7,OECD,andelsewhereshouldestablishtechnicalandlegalcriteriaforevaluatingcloudtrustworthinessratherthanrelyingonvaguenationalsecurityandintelligenceconcerns.Ifcountriestrusteachotherincontextssuchasdefense,intelligence,lawenforcement,andtrade,buttheydon’ttrusteachother’scloudfirms,thenhowaretheysupposedtoworktogether,andwiththirdcountries,onothertechissues?...