Enabling Trust through Continuous Compliance Assurance

As the digital world expands the building of trust and the retention of privacy in information sharing becomes paramount. The impediment to information sharing is a lack of trust between the parties, based on security and privacy concerns, as well as information asymmetry. In an effort to foster trusted information sharing we propose a trusted enclave with an embedded Continuous Compliance Assurance (CCA) mechanism as a technology solution. The CCA mechanism if not too costly in processing, would assure compliance to all regulatory policies regarding the data to be shared. A test bed which mimics the trusted enclave with the embedded CCA module was built to capture realistic performance statistics. The performance statistics gathered through the test bed indicate that real time compliance assurance is feasible, thereby enabling trusted information sharing.