Technical Specifications Booklet (TSB) to be integrated in a Request For Proposal for trusted cloud solutions

29 avril 2024 | ACTUALITÉS, Cigref in english, Communiqués

A certain number of Cigref members are planning to issue a Request For Proposal (RFP) for trusted cloud solutions. That is why we decided to work collectively on drafting the technical part of such a RFP, taking into account the Cigref trusted cloud referential. Indeed, Cigref members have expressed their generic trust needs as users of cloud services in the trusted cloud referential where the version°3, version amended by European users and suppliers, is available here.

Download the Conversion Matrix

Download the grading grid

Download the explanatory guide

Download the Answers grid

Ce document existe aussi en français

This TSB which is to be integrated in the Request for Proposal (RFP) for a trusted cloud, outlines the requirements and the expectations of the Cloud Services Customer (CSC) for the acquisition of a set of Trusted Cloud Computing services (IaaS, PaaS, CaaS, FaaS). The TSB shares the needs and challenges faced by companies and public administrations in terms of security, control of vendor dependency, immunity from non-European laws, control of the environmental footprint of cloud services and trust in cloud providers. These requirements incorporate the Cloud « safe » and Cloud « trusted » criteria of Cigref trusted cloud referential.

Before sending the TSB to the Cloud Service Provider (CSP), some parts need to be modified/completed by the CSC so that they are adapted to its specific needs, context and activities. It is important to note that this document is a reference and can of course be adapted beyond the recommendations by deleting or adding new sections and requirements.

Excel files complete the TSB.

  • The Conversion Matrix keeps track of where the requirements in the TSB come from. It makes it easy to understand the origin of a requirement and to be able to find it in its original form in the trusted Cloud reference document.
  • The Answers Grid is here to help the CSP in its answers and the CSC in its evaluation of the suppliers’ answers. In order to simplify the evaluation of the TSB, we have split the question/requirement into two types: the YES-NO questions and the open questions. The open questions group together the questions which require a detailed answer.
  • the Grading Grid for rating suppliers’ responses to each of the requirements detailed in the technical specifications, with the option of also taking an overall view. This grid is accompanied by an explanatory guide on how to use and modify it so that it corresponds exactly to the technical clauses in the CCTP.

Our thanks go to EDF and Airbus, who co-piloted this work, and to all the people who contributed to this task force.
We would also like to extend our warmest thanks to Wavestone for its support in drafting the TSB and the associated documents. 

Guide de mise en œuvre de l’AI Act : Cartographie des obligations applicables aux organisations

La loi européenne sur l’Intelligence Artificielle, plus communément désignée comme AI Act, vise à créer un cadre global de confiance avec pour objectif le développement et le déploiement d’une IA respectueuse des valeurs européennes.  À partir du 2 février 2025,...

Guide de mise en œuvre de l’AI Act : Points clés – Introduction

La loi européenne sur l’Intelligence Artificielle, plus communément désignée comme AI Act, vise à créer un cadre global de confiance avec pour objectif le développement et le déploiement d’une IA respectueuse des valeurs européennes. Ce guide pratique s'adresse à...

Migration dans le cloud : point d’étape

Après deux années de travaux sur la migration vers le cloud, de 2020 à 2022, le Cigref avait marqué une pause sur ce sujet. L'objectif de cette interruption était de permettre aux organisations de poursuivre leur programme de migration et de recueillir, l'année...

IT Job Profiles Nomenclature 2024 version

Since 1991, Cigref has maintained a nomenclature of existing job profiles in the digital departments of Cigref member companies. This tool does not represent what IS professions "should" or "will" be, but what they are today in these organizations. It therefore...

Cloud migration : update

After two years of work on cloud migration, from 2020 to 2022, Cigref took a break from the subject. The aim of this pause was to allow organisations to continue with their migration programme and to gather updated, clear and constructive feedback the following year....