About
The Cloud Security Alliance is a non-profit organization formed to promote the use of best practices for providing security assurance within Cloud Computing, and provide education on the uses of Cloud Computing to help secure all other forms of computing.
The Cloud Security Alliance is comprised of many subject matter experts from a wide variety disciplines, united in our objectives:
- Promote a common level of understanding between the consumers and providers of cloud computing regarding the necessary security requirements and attestation of assurance.
- Promote independent research into best practices for cloud computing security.
- Launch awareness campaigns and educational programs on the appropriate uses of cloud computing and cloud security solutions.
- Create consensus lists of issues and guidance for cloud security assurance.
Leadership
Board of Directors
Management Team
Working Group Leadership
History
The issues and opportunities of cloud computing gained considerable notice in 2008 within the information security community. It was at a security practitioners' conference, the ISSA CISO Forum in Las Vegas, November 20, 2008, where the concept of the Cloud Security Alliance was born. Following a presentation of emerging trends by Jim Reavis that included a call for action for securing cloud computing, Reavis and Nils Puhlmann outlined the initial mission and strategy of the Cloud Security Alliance. A series of organizational meetings in early December 2008 that included Reavis, Puhlmann and industry leaders such as Dave Cullinane, Philippe Courtot, Alan Boehme, Izak Mutlu, Jay Chaudhry, Christofer Hoff, Paul Kurtz and Jean Pawluk formalized the founding of the Cloud Security Alliance. Our outreach to the information security community to create our initial work product for the 2009 RSA Conference resulted in dozens of volunteers to research, author, edit and review our first whitepaper. We are proud to recognize these individuals as founding members. We look forward to welcoming all interested practitioners as members of this organization going forward to continue our important work.
Founding Members
|
Phil Agcaoili, Dell Jerry Archer, Intuit Todd Barbee, New Dominion Bank Jeff Bardin, Treadstone 71 Girish Bhat, SAVVIS Alan Boehme, ING Larry Brock, DuPont Glenn Brunette, Sun Jake Brunetto, Intuit Jon Callas, PGP Sean Catlett, Barclays Shawn Chaput, Privity Jay Chaudhry, Zscaler Anton Chuvakin, Qualys Philippe Courtot, Qualys Dave Cullinane, eBay Joshua Davis, Qualcomm Dr Ken Fauth Robert Fly, Salesforce.com Jeff Forristal, Zscaler Pam Fusco, UAT Francoise Gilbert, IT Law Group Edward Haletky, AstroArch Consulting Jim Hietala, The Open Group Christofer Hoff, Rational Survivability Dennis Hurst, HP Michael Johnson, Security GRC2 |
Shail Khiyara, Cloud Consulting Subra Kumaraswamy, Sun Paul Kurtz, Good Harbor Consulting Mark Leary, Northrop Grumman Liam Lynch, eBay Tim Mather, RSA Security Scott Matsumoto, Cigital Dave Morrow, Secure Business Operations Izak Mutlu, Salesforce.com Brian O'Higgins, Third Brigade Jean Pawluk, Visa Josh Pennell, IOActive Nils Puhlmann, Qualys Jim Reavis, Cloud Security Alliance George Reese, enStratus Jeff Reich, FUDless Jeffrey Ritter, Waters Edge Consulting Ben Rothke, BT Stephen Sengam, Fox/Newscorp Ward Spangenberg, IOActive Jeff Spivey, RiskIQ Michael Sutton, Zscaler Lynne Terwoerds, Barclays Dave Tyson, eBay John Viega, McAfee Dov Yoran, MetroSITE Group Josh Zachry, Rackspace |
Founding Charter Companies

Founding Affiliate Members
Affiliate Members








Corporate Members





















































You can follow us here: