IT Security Management (ISM) in EOSC-hub: policies and global trust

This talk will present the developments made by the EOSC-hub security team in 2018, including the work on harmonising EGI and EUDAT policies and procedures, in collaboration with the EU H2020 AARC2 project, and streamlining security policies within EOSC-hub.
In 2018, we have worked, for example, on a harmonised Acceptable Use Policy (AUP). This is important for collaboration between Infrastructures as a single common baseline AUP, shared between Infrastructures, makes user registration simpler. We have also worked on a GDPR policy framework to help tackle the issues of Data Privacy across the Infrastructures. The current status of the various security policies will be presented together with planned future work. To help address issues of security and trust between collaborating infrastructures across the world, the WISE (Wise Information Security for e-Infrastructures) Community was created back in 2015. This community has produced a number of documents and continues to be active in several areas related to ISM. This talk will also present recent work in WISE to build trust and define best practice, in working groups on Security for Collaborating Infrastructures, and on the security issues related to High Throughput Data transfers.