Skip to main content
Language
English
Category Type
Knowledge Domain
Description

This domain refers to the methodologies, frameworks and tools that provide ground for having confidence that a system,software, service, process or network is working or has been designed to operate at the desired security target or according to a defined security policy.

In Schemes

http://data.jrc.ec.europa.eu/ontology/cybersecurity/cybersecurity-taxon…

http://data.jrc.ec.europa.eu/ontology/cybersecurity/knowledge_domain

Narrower
Assessment
Assurance
URI
http://data.jrc.ec.europa.eu/ontology/cybersecurity/assurance_audit_certificati…
Notation

assurance_audit_certification

EMERALD D6.1 — Project flyer and public website

Submitted by dcarboni on
First flyer and public website establishing EMERALD’s brand identity
Outcome Type
Report
Lens
Civilian
Source Organisation
EMERALD project
What it is

The first piece of EMERALD’s dissemination and communication strategy (WP6). It describes the project’s first flyer and its public website, setting the basis of EMERALD’s brand identity.

Why it matters

It establishes EMERALD’s public presence and brand identity, providing the channels through which the project communicates its goals and results to stakeholders and the wider community. Co-funded by the European Union under the EMERALD Horizon Europe project.

Release Date
Target Audiences
Industry & SMEs
Research & Academia
JRC Cybersecurity Taxonomy
Assurance, Audit, and Certification
DOI
10.5281/zenodo.17198841
Licence
CC BY-SA 4.0
External references
Resource URL
EMERALD D6.1 on Zenodo
EMERALD project website
Related project
Evidence Management for Continuous Certificat

EMERALD D5.1 — Pilot definition, set-up & validation plan

Submitted by dcarboni on
Definition, set-up, KPIs and validation plan for the EMERALD pilots
Outcome Type
Report
Lens
Civilian
Source Organisation
EMERALD project
What it is

This deliverable defines the EMERALD pilots and their set-up, and introduces the validation plan for the EMERALD framework and its pilots. It captures the business-driven requirements and Key Performance Indicators (KPIs) for each pilot.

Why it matters

By clarifying pilot goals, requirements and KPIs, it aligns the technical work packages and eases communication between technical and non-technical partners, guiding the validation of the EMERALD framework in real settings. Co-funded by the European Union under the EMERALD Horizon Europe project.

Release Date
Target Audiences
Industry & SMEs
Research & Academia
JRC Cybersecurity Taxonomy
Assurance, Audit, and Certification
Security testing and validation
DOI
10.5281/zenodo.17198808
Licence
CC BY-SA 4.0
External references
Resource URL
EMERALD D5.1 on Zenodo
Related project
Evidence Management for Continuous Certificat

EMERALD D4.2 — UI/UX requirements analysis and work processes (v2)

Submitted by dcarboni on
Final UI/UX results and user interaction concept for the EMERALD CaaS platform
Outcome Type
Report
Lens
Civilian
Source Organisation
EMERALD project
What it is

The final results of EMERALD’s UI/UX requirements analysis and work processes. It presents the user interaction concept leading to a full UI/UX for the Compliance-as-a-Service (CaaS) platform, focusing on continuous, lean re-certification and the user’s needs. Extended version of D4.1.

Why it matters

A well-designed UI/UX makes continuous compliance and re-certification accessible and user-centred, lowering the barrier to adopting EMERALD’s CaaS platform. Co-funded by the European Union under the EMERALD Horizon Europe project.

Release Date
Target Audiences
Industry & SMEs
Research & Academia
JRC Cybersecurity Taxonomy
Assurance, Audit, and Certification
Human Machine Interface
DOI
10.5281/zenodo.17193493
Licence
CC BY-SA 4.0
External references
Resource URL
EMERALD D4.2 on Zenodo
Related project
Evidence Management for Continuous Certificat

EMERALD D3.2 — Evidence assessment and Certification: Concepts (v2)

Submitted by dcarboni on
Final concepts for WP3 evidence assessment within the EMERALD CaaS framework
Outcome Type
Report
Lens
Civilian
Source Organisation
EMERALD project
What it is

The final version of EMERALD’s evidence assessment and certification concepts. It reports the requirements, design and integration of the WP3 components — the central integration point for evidence collection and knowledge-extraction tools within the Compliance-as-a-Service (CaaS) framework.

Why it matters

It explains how collected evidence is assessed to produce appropriate compliance attestations, enabling continuous certification of harmonised cybersecurity schemes. Co-funded by the European Union under the EMERALD Horizon Europe project.

Release Date
Target Audiences
Industry & SMEs
Research & Academia
JRC Cybersecurity Taxonomy
Assurance, Audit, and Certification
Cloud, Edge and Virtualisation
DOI
10.5281/zenodo.17184431
Licence
CC BY-SA 4.0
External references
Resource URL
EMERALD D3.2 on Zenodo
Related project
Evidence Management for Continuous Certificat

EMERALD D2.1 — Graph Ontology for Evidence Storage

Submitted by dcarboni on
Uniform schema for storing and linking certification evidence (CertGraph)
Outcome Type
Report
Lens
Civilian
Source Organisation
EMERALD project
What it is

A uniform graph-based schema (the Certification Graph, CertGraph) for storing and linking the heterogeneous evidence collected at different levels of a cloud service. It describes the development of the ontology, integrating inputs across EMERALD’s evidence-collection and assessment tasks.

Why it matters

By unifying how certification evidence is stored and linked, it enables consistent, machine-readable evidence management across EMERALD’s components, supporting continuous cloud certification. Co-funded by the European Union under the EMERALD Horizon Europe project.

Release Date
Target Audiences
Industry & SMEs
Research & Academia
JRC Cybersecurity Taxonomy
Assurance, Audit, and Certification
Design, implementation, and operation of data management systems that include security and privacy functions
DOI
10.5281/zenodo.17177345
Licence
CC BY-SA 4.0
External references
Resource URL
EMERALD D2.1 on Zenodo
Related project
Evidence Management for Continuous Certificat

EMERALD D1.6 — DevOps methodology and CI/CD strategy (v2)

Submitted by dcarboni on
Final DevOps and CI/CD strategy for the EMERALD CaaS Framework
Outcome Type
Report
Lens
Civilian
Source Organisation
EMERALD project
What it is

The final version of EMERALD’s DevOps methodology and CI/CD (Continuous Integration/Continuous Deployment) strategy. It builds on the lessons learnt in the first half of the project and guides the upcoming releases and pilot deployments of the CaaS Framework.

Why it matters

It defines how the EMERALD CaaS Framework is built, integrated and deployed continuously, ensuring reliable delivery across releases and pilots. Co-funded by the European Union under the EMERALD Horizon Europe project.

Release Date
Target Audiences
Industry & SMEs
Research & Academia
JRC Cybersecurity Taxonomy
Assurance, Audit, and Certification
Cloud, Edge and Virtualisation
DOI
10.5281/zenodo.17093127
Licence
CC BY-SA 4.0
External references
Resource URL
EMERALD D1.6 on Zenodo
Related project
Evidence Management for Continuous Certificat

EMERALD D1.2 — Data modelling and interaction mechanisms (v2)

Submitted by dcarboni on
Final data model and interaction documentation for the EMERALD framework
Outcome Type
Report
Lens
Civilian
Source Organisation
EMERALD project
What it is

The final version of EMERALD’s data modelling and interaction mechanisms. It reports the data diagrams, design and documentation of the EMERALD framework and its components, coordinating the data shared across WP2, WP3 and WP4, and describing data exchange and formats.

Why it matters

It defines how data is structured and exchanged between EMERALD’s components, providing a shared reference that enables interoperability across the framework’s evidence-management and certification modules. Co-funded by the European Union under the EMERALD Horizon Europe project.

Release Date
Target Audiences
Industry & SMEs
Research & Academia
JRC Cybersecurity Taxonomy
Assurance, Audit, and Certification
Design, implementation, and operation of data management systems that include security and privacy functions
DOI
10.5281/zenodo.17045735
Licence
CC BY-SA 4.0
External references
Resource URL
EMERALD D1.2 on Zenodo
Related project
Evidence Management for Continuous Certificat

SAMA PARTNERS Business Solutions GmbH

Short name
SAMA PARTNERS
Profile type
Organisation
Country
Germany
Organisation type
SME
Website
https://www.samapartners.com
Contact name
Christopher Beck
Contact phone
+4962110759978
User role in organisation
Administrative Officer
Knowledge Domains
Assessment
Assessment of information security effectiveness and degrees of control
Assurance, Audit, and Certification
Attack modelling, techniques, and countermeasures
Attack techniques
Automating security functionality
Compliance with information security and privacy policies, procedures, and regulations
Computer ethics and security
Coordination and information sharing in the context of cross-border/organizational incidents
Post-quantum cryptography
Cyber ranges, Capture the Flag exercises, simulation platforms, educational/training tools, cybersecurity awareness
Cybersecurity and cyber-safety co-engineering
Cybersecurity concepts, definitions, ontologies, taxonomies, foundational aspects
Cybersecurity regulation analysis and design
Cybersecurity-aware culture
Data Security and Privacy
Data integrity
Data usage control
Design, implementation, and operation of data management systems that include security and privacy functions
Digital Rights Management
Eavesdropping techniques
Privacy Enhancing Technologies
Privacy requirements for data management systems
Risk analysis and attacks with respect to de-anonymization or data re-identification
Digital forensic case studies
Digital forensic processes and workflow models
Digital watermarking
Distributed consensus techniques
Distributed systems security
Distributed systems security analysis and simulation
Economic aspects of the cybersecurity ecosystem
Education and Training
Education methodology
Professional training
Vocational training
Enhancing risk perception
Fault injection testing and analysis
Formal specification of various aspects of security
Formal specification, analysis, and verification of software and hardware
Formal verification of security assurance
Governance aspects of incident management, disaster recovery, business continuity
Human aspects
Human aspects of trust
Human perception of cybersecurity
Human-related risks/threats
Non-intrusive security
Privacy concerns, behaviours, and practices
Psychological models and cognitive processes
Security visualization
Socio-technical security
Transparent security
Usability
User acceptance of security policies and technologies
Identification of the impact of hardware and software changes on the management of Information Security
Identity and trust management
Identity and attribute management models, frameworks, applications, technologies, and tools
Identity management quality assurance
Legal aspects of identity management
Optical and electronic document security
Privacy and identity management
Protocols and frameworks for authentication, authorization, and rights management
Incident Handling and Digital Forensics
Incident analysis, communication, documentation, forecasting, response, and reporting
Policy issues related to digital forensics
Resilience aspects
Theories, techniques and tools for the identification, collection, attribution, acquisition, analysis and preservation of digital evidence
Vulnerability analysis and response
Information flow modelling and its application to confidentiality policies, composition of systems, and covert channel analysis
Intrusion detection and honeypots
Investigations of computer crime (cybercrime) and security violations
Legal and societal issues in information security
Malware analysis including adversarial learning of malware
Managerial aspects concerning information security
Managerial, procedural and technical aspects of network security
Measurement and assessment of security levels
Model-driven security and domain-specific modelling languages
Modelling of cross-sectoral interdependencies and cascading effects
Network and Distributed Systems
Network attack propagation analysis
Network interoperability
Network layer attacks and mitigation techniques
Network security (principles, methods, protocols, algorithms and technologies)
Network steganography
Privacy-friendly communication architectures and services
Protocols and frameworks for secure distributed computing
Requirements for network security
Secure distributed computations
Secure system interconnection
New theoretically-based techniques for the formal analysis and design of cryptographic protocols and their applications
Privacy impact assessment and risk management
Processes and procedures to ensure device end-of-life security and privacy
Quantitative security for assurance
Refinement and verification of security management policy models
Risk management, including modeling, assessment, analysis and mitigation
Runtime security verification and enforcement
Secure programming principles and best practices
Secure software architectures and design
Security and risk analysis of components compositions
Security Management and Governance
Standards for Information Security
Techniques to ensure business continuity/disaster recovery
Threats and vulnerabilities modelling
Security analytics and visualization
Security metrics, key performance indicators, and benchmarks
Validation and comparison frameworks for security metrics
Security requirements engineering with emphasis on identity, privacy, accountability, and trust
Security testing and validation
Semantics and models for security, accountability, privacy, and trust
Software and Hardware Security Engineering
Vulnerability discovery and penetration testing
Trust Management and Accountability
Trust and privacy
Trust and reputation of social and mainstream media
Trust in decision making algorithms
Trust in securing digital as well as physical assets
Trust management architectures, mechanisms and policies
Trusted computing
Sectors
Chemical
Defence
Digital Services and Platforms
Energy
Financial
Government
Health
Manufacturing and supply chain
Safety and Security
Telecomm Infrastructure
Transportation
Technologies
Artificial intelligence
Cloud, Edge and Virtualisation
Industrial IoT and Control Systems
Information systems
Operating systems
Quantum Technologies
UAV
Use Cases
Critical Infrastructure Protection
Dual-use rating
Low
Programmes
Digital Europe ECCC 2026
Profile completeness
100%