Trending Topics

Germany grants SAP Cloud Infrastructure VS-NfD authorisation
SAP has announced that its SAP Cloud Infrastructure in Walldorf/St. Leon-Rot has been given the green light by the German Federal Office for Information Security (BSI) to process information classified as VS-NfD, which stands for Restricted – For Official Use Only.
According to SAP, the authorisation applies to workloads running on SAP Cloud Infrastructure in SAP’s own data centres in the Walldorf/St. Leon-Rot region, which are operated exclusively by security-cleared personnel.
Strengthening the sovereign cloud portfolio
SAP Cloud Infrastructure is an Infrastructure-as-a-Service (IaaS) platform, developed and operated by the company using open-source technologies. SAP said the platform is designed to support data, operational, technical and legal sovereignty requirements, and is underpinned by a sovereign cloud region comprising three independent availability zones across separate data centres in Walldorf/St. Leon-Rot.
The company touted the authorisation makes SAP “one of only a few providers in Germany that will be offering a cloud environment whose key security components have received corresponding authorisation to use from the BSI”.
It added the authorisation also strengthens SAP’s sovereign cloud portfolio for public sector organisations and regulated industries, and enables security-critical SAP and customer applications to run in a compliant cloud environment.
“As a deployment option within SAP Sovereign Cloud, SAP Cloud Infrastructure is an integral part of SAP’s portfolio for digital sovereignty. Together with the SAP Sovereign Cloud On-Site offering and Delos Cloud, SAP provides customers with demanding regulatory requirements the freedom of choice, control, and robust security they need,” it said.
According to SAP, the platform already holds certifications including ISO/IEC 27001 based on IT-Grundschutz for the data centres, EN 50600/ISO/IEC 22237, TSI Level 3+ and C5 Type II. The company said this latest authorisation marks an important milestone in its cloud security and compliance efforts.
“The authorisation to use represents an important milestone and forms the basis for the subsequent full BSI approval SAP is working toward, including the recertification of SAP Cloud Infrastructure according to ISO 27001 based on the German IT-Grundschutz framework,” SAP said.
The authorisation was granted following what SAP described as a “close and constructive” evaluation process by the BSI that took approximately 12 months. The company said the assessment reflects growing collaboration between government agencies and technology providers on cloud security and compliance requirements.
