IGF 2023 WS #27 Cybersecurity and cloud computing: advantages and risks

Subtheme

Cybersecurity, Cybercrime & Online Safety
New Technologies and Risks to Online Security

Organizer 1: Adrian Carballo, 🔒
Organizer 2: Olga Cavalli, 🔒Argentina National Cybersecurity Direction
Organizer 3: Oscar Messano, 🔒CCAT LAT

Speaker 1: William J. Drake, Civil Society, Western European and Others Group (WEOG)
Speaker 2: Tatiana Tropina, Civil Society, Western European and Others Group (WEOG)
Speaker 3: Vinton CERF, Private Sector, Western European and Others Group (WEOG)
Speaker 4: Olga Cavalli, Government, Latin American and Caribbean Group (GRULAC)
Speaker 5: Riccardo Nanni, Civil Society, Western European and Others Group (WEOG)
Speaker 6: Caleb Ogundele, Civil Society, African Group
Speaker 7: Brum Rosane, Private Sector, Latin American and Caribbean Group (GRULAC)

Moderator

Olga Cavalli, Government, Latin American and Caribbean Group (GRULAC)

Online Moderator

Patricia Vargas, Technical Community, Latin American and Caribbean Group (GRULAC)

Rapporteur

Adrian Carballo, Civil Society, Latin American and Caribbean Group (GRULAC)

Format

Debate - 90 Min

Policy Question(s)

What are the main advantages of using cloud services in relation with cybersecurity?
Which are the top cybersecurity threats when using cloud technologies?
Are there regulations that could impact the location of cloud infrastructure? For example those related with privacy or cross border data flow?
What can be done to diminish the impact of cloud infrastructure in relation with its impact of climate?
How can we ensure a safer cloud services environment?

What will participants gain from attending this session? This workshop will debate and exchange ideas about the importance of implementing cybersecurity measures with focus in cloud computing.
Participants will understand the main cybersecurity threats in cloud services, and also understand ways to diminish these threats.
The workshop will enhance the dialogue among the various stakeholders present in the debate: Government, civil society / academy, private sector and technical community, whith the purpose of understanding the advantages of using cloud services and also how to enhance security.

Description:

This workshop will debate and exchange ideas about the importance of implementing cybersecurity measures with focus in cloud computing.

The proposed activity follows a previous workshoo of the WSIS Forum 2023 activities "Cybersecurity and Resilience: Development of cyber capacities in the emerging economies", details in this link: https://www.itu.int/net4/wsis/forum/2023/Agenda/Session/521

The 2020 pandemic forced many companies to move activities to online environments. This sudden change helped maintain business continuity, but the rapid shift introduced new security and data protection issues.

Cloud computing is a method of delivering computing services over the internet, reducing costs and improving security. There is trust in cloud computing that is present in many of the daily activities we perform on line. Information is easily recoverable and available on all devices.

Data is growing exponentially, and data security is the fundamental right of human beings, and with data migrating to a cloud environment, a cloud security becomes of high relevance.

A number of cloud services are available for businesses to improve their day-to-day operations. These services have allowed organizations to expand and grow their business. These services also provide protection for data stored in the cloud.

These cloud computing services are offered in different ways:
Software as a Service (SaaS)
Platform as a Service (PaaS)
Infrastructure as a Service (IaaS)

At the same time, when hosting data in the cloud, service providers must be aware of the importance of protecting infrastructure and stored data. The main risks are: data privacy compliance, data breaches, unauthorized access, malware, among others.

In this workshop, experts from different stakeholders will debate about the ways to enhance the security of the information stored in the cloud, taking precautionary steps at the right time. Ideas on how to take the appropriate actions are the expected outcomes of this open dialogue proposed in the workshop.

Expected Outcomes

Expected outcomes:
The debate will allow participants to hear from experts the challenges and advantages of using cloud services, with special focus on cybersecurity.

Specific outputs:
After the IGF in Kyoto, the South School on Internet Governance (SSIG) will organize an on site / hybrid event where one of the focus of training and debate will be the same as this workshop, as a folow up activity. The hybrid format will allow the participation of experts from different countries and stakeholder groups, to follow up the debate.

The South School on Internet Governance offers fellowships to complete a Diploma in Internet Governance and Regulations with the University of Mendoza, Argentina. The Diploma is based on researches made by the fellows with the university tutors. One of the research focus will be Cloud services and Cybersecurity: benefits and challenges, which will use the outcomes of this workshop as a research material.

Hybrid Format: Workshop will be organized in English language, with onsite organizers of the South School on Internet Governance, and other supporting organizations, former graduated students of the SSIG and experts, and several others participating from remote.
Organizers of this workshop have experience in hybrid events. The SSIG moved to virtua in 2020 and 2021 and a hybrid format in 2021. All sessions are in the SSIG YouTube channel, including a tv style format.
https://www.youtube.com/@ssiglac/videos

The session will be design in a way to allow interaction from onsite participants and remote participants, this will be managed by the moderator and remote moderator.

Workshop will have its own hashtag shared before and will be followed in the @SSIGLAC twitter account.
Other tools as Mentimeter will be also used.

The workshop will be promoted among the South School on Internet Governance and CCAT LAT networks.