BSidesLuxembourg 2026

Catalin Tiganila

I am a cybersecurity consultant and auditor with experience in Information Security, Cyber Security, Cloud Security, IT Governance, IT Risk Management, IT Compliance, IT Audit and in Data Privacy.

With more than 25 years practice in delivering advisory and audit engagements, as part of several consulting firms, I delivered numerous projects as part of international teams in different geographies covering a wide range services in diverse industries: finance and banking, technology, telecommunication, start-ups, energy, healthcare, retail and manufacturing.


Session

05-07
14:50
30min
Cloud Sovereignty
Catalin Tiganila

Presentation on why cloud sovereignty has become a board-level strategic issue, touching on foreign interference, platform lock-in, tech dependency, and the critical insight that not all cloud models are equal.
• Why sovereignty, autonomy, and resilience are executive-level concerns (regulatory mandates, legal exposure, operational continuity)
• The triple threat landscape (foreign interference via US CLOUD Act, platform lock-in costs, tech dependency risks)
• How the guide helps governments and critical organizations with risk mitigation frameworks and compliance mapping
• Two sovereign cloud operating models (Full EU Isolation vs. Guardrail Sovereign)
• Strategic alignment matrix showing how different cloud models match organizational needs
• EU regulatory context (DORA, NIS2, EU Data Act, upcoming Cloud & AI Act)
• Technical controls and implementation priorities

Cloud track
Workshops and Stage - Design Space (C1.05.12)