About

The Cloud Security Alliance is a non-profit organization formed to promote the use of best practices for providing security assurance within Cloud Computing, and provide education on the uses of Cloud Computing to help secure all other forms of computing.

The Cloud Security Alliance is comprised of many subject matter experts from a wide variety disciplines, united in our objectives:

Leadership

Board of Directors
Management Team
Working Group Leadership

History

The issues and opportunities of cloud computing gained considerable notice in 2008 within the information security community. It was at a security practitioners' conference, the ISSA CISO Forum in Las Vegas, November 20, 2008, where the concept of the Cloud Security Alliance was born. Following a presentation of emerging trends by Jim Reavis that included a call for action for securing cloud computing, Reavis and Nils Puhlmann outlined the initial mission and strategy of the Cloud Security Alliance. A series of organizational meetings in early December 2008 that included Reavis, Puhlmann and industry leaders such as Dave Cullinane, Philippe Courtot, Alan Boehme, Izak Mutlu, Jay Chaudhry, Christofer Hoff, Paul Kurtz and Jean Pawluk formalized the founding of the Cloud Security Alliance. Our outreach to the information security community to create our initial work product for the 2009 RSA Conference resulted in dozens of volunteers to research, author, edit and review our first whitepaper. We are proud to recognize these individuals as founding members. We look forward to welcoming all interested practitioners as members of this organization going forward to continue our important work.

Founding Members

Phil Agcaoili, Dell
Jerry Archer, Intuit
Todd Barbee, New Dominion Bank
Jeff Bardin, Treadstone 71
Girish Bhat, SAVVIS
Alan Boehme, ING
Larry Brock, DuPont
Glenn Brunette, Sun
Jake Brunetto, Intuit
Jon Callas, PGP
Sean Catlett, Barclays
Shawn Chaput, Privity
Jay Chaudhry, Zscaler
Anton Chuvakin, Qualys
Philippe Courtot, Qualys
Dave Cullinane, eBay
Joshua Davis, Qualcomm
Dr Ken Fauth
Robert Fly, Salesforce.com
Jeff Forristal, Zscaler
Pam Fusco, UAT
Francoise Gilbert, IT Law Group
Edward Haletky, AstroArch Consulting
Jim Hietala, The Open Group
Christofer Hoff, Rational Survivability
Dennis Hurst, HP
Michael Johnson, Security GRC2
Shail Khiyara, Cloud Consulting
Subra Kumaraswamy, Sun
Paul Kurtz, Good Harbor Consulting
Mark Leary, Northrop Grumman
Liam Lynch, eBay
Tim Mather, RSA Security
Scott Matsumoto, Cigital
Dave Morrow, Secure Business Operations
Izak Mutlu, Salesforce.com
Brian O'Higgins, Third Brigade
Jean Pawluk, Visa
Josh Pennell, IOActive
Nils Puhlmann, Qualys
Jim Reavis, Cloud Security Alliance
George Reese, enStratus
Jeff Reich, FUDless
Jeffrey Ritter, Waters Edge Consulting
Ben Rothke, BT
Stephen Sengam, Fox/Newscorp
Ward Spangenberg, IOActive
Jeff Spivey, RiskIQ
Michael Sutton, Zscaler
Lynne Terwoerds, Barclays
Dave Tyson, eBay
John Viega, McAfee
Dov Yoran, MetroSITE Group
Josh Zachry, Rackspace

Founding Charter Companies

PGPQualysZscaler

Founding Affiliate Members

ISACA

Affiliate Members

ASPIC Japan Barcelona Digital Technology Centre cloud-standards.org ENISA Fundació Cecot Innovació Institute for Cyber Security, UTSA IPA ISACA ISMS MashSSL Jericho Forum OWASP

Corporate Members

3PAR Absolute Software Arbor Networks ArcSight AT&T BeyondTrust CaseCentral CA Cisco ClearPoint Metrics Dell Fiberlink Fortify Software Forum Systems Google HCL Technologies HP Hubspan Intel IntraLinks Iron Mountain Lenovo Security LiveOffice Lockheed Martin LogLogic McAfee Microsoft NaviSite NetWitness Novell NSFocus Oracle PGP Ping Identity Qualys Rackspace RISING RSA Security SafeNet Solutionary Sonoa Symantec Tata Communications Terremark Trend Micro Trustwave Veracode VeriSign Verizon Business VMWare Vordell Websense WhiteHat Security Zscaler

You can follow us here: