MSP360 Adds Support for AWS European Sovereign Cloud
Backup solutions provider MSP360 announced support for the AWS European Sovereign Cloud. The move is a direct response to intensifying enforcement of EU regulations like the Digital Operational Resilience Act (DORA) and NIS2. The company noted that sovereign cloud requirements are increasingly appearing in RFPs from public sector and enterprise organizations in the EU.
- The AWS European Sovereign Cloud launched its first region in Brandenburg, Germany, backed by a €7.8 billion investment. This cloud is a physically and logically separate infrastructure operated exclusively by EU residents to ensure that all customer data and metadata remain within the EU. - This sovereign cloud offering is a direct response to regulations like the NIS2 Directive, which mandates stronger cybersecurity measures and incident reporting for essential service providers across 18 critical sectors in the EU. - The Digital Operational Resilience Act (DORA) also drives adoption, requiring financial institutions to implement comprehensive ICT risk management, conduct regular resilience testing, and manage third-party provider risks, with compliance mandated by January 17, 2025. - Key features of the AWS European Sovereign Cloud include independent billing and usage metering systems, and dedicated networking and DNS infrastructure using European top-level domains. All operations, support, and access are handled by EU residents located within the EU. - Upon launch, the sovereign cloud offered around 70 services, including core compute, storage, and AI services like Amazon EC2, Amazon S3, and AWS Lambda. - Other data management and security vendors, such as Commvault and Cohesity, have also been named launch partners for the AWS European Sovereign Cloud, indicating a growing ecosystem to support data sovereignty requirements. - Both NIS2 and DORA hold senior management directly accountable for non-compliance with cybersecurity risk management measures, elevating the issue of data sovereignty to a board-level concern. - The regulations necessitate robust incident reporting, with DORA requiring financial entities to classify and report significant ICT-related incidents, and NIS2 mandating notification of incidents that could cause significant disruption.