Cloud 101CircleEventsBlog
Discover the latest cloud threats, evolving AI risks, and how to stay ahead. Don’t miss CSA’s free Cloud Threats & Vulnerabilities Summitregister now!

Working Group

Security Guidance

The advancement toward secure cloud computing requires active participation from a broad set of globally-distributed stakeholders.
View Current Projects
Security Guidance for Critical Areas of Focus in Cloud Computing v5
Security Guidance for Critical Areas of Focus in Cloud Computing v5

Download

Working Group Overview
The advancement toward secure cloud computing requires active participation from a broad set of globally-distributed stakeholders. CSA brings together this diverse community of industry partnerships, international chapters, working groups, and individuals to create the Cloud Security Guidance.


Security Guidance v5 now available!
The Security Guidance v5 provides a comprehensive understanding of the essential security measures needed in today's cloud landscape. The v5 body of knowledge includes the latest in cloud architecture, cloud native security, workloads, virtual networking, data security, DevSecOps, Zero Trust, Generative AI, and much more. V5 also includes vital information about risk management, achieving compliance, optimizing organizational cloud security strategies, and understanding the shared responsibility model.

Working Group Leadership

Rich Mogull
Rich Mogull

Rich Mogull

CEO at Securosis

Rich is the VP of Product for DisruptOPS and Analyst and CEO of Securosis. With twenty years of experience in information security, physical security, and risk management, Rich is one of the foremost experts on cloud security, having driven development of the Cloud Security Alliance’s V4 Guidance and the associated CCSK training curriculum. He is a prolific writer and fe...

Read more

Publications in ReviewOpen Until
Zero Trust Automation & Orchestration and Visibility & Analytics Overview - Implementing Needed Cross-Cutting CapabilitiesApr 18, 2025
Dynamic Process Landscape: A Strategic Guide to Successful AI ImplementationApr 18, 2025
Zero Trust Guidance for IoTApr 18, 2025
MLOps OverviewApr 18, 2025
View all
Who can join?

Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.

What is the time commitment?

The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.

Open Peer Reviews

Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.

Learn how to participate in a peer review here.

Zero Trust Automation & Orchestration and Visibility & Analytics Overview - Implementing Needed Cross-Cutting Capabilities

Open Until: 04/18/2025

Visibility & Analytics and Automation & Orchestration are foundational, cross-cutting capabilities within the Zero ...

Dynamic Process Landscape: A Strategic Guide to Successful AI Implementation

Open Until: 04/18/2025

AI adoption in business and manufacturing is failing more often than it succeeds. Why? Because companies are trying to inte...

Zero Trust Guidance for IoT

Open Until: 04/18/2025

Adopting Internet of Things (IoT) technologies introduces security challenges that require an effective strategy for ensuri...

MLOps Overview

Open Until: 04/18/2025

The practice of DevSecOps has evolved significantly since the start of the CSA DevSecOps Working Group in 2019. We have tak...