The industry needs a threat-informed framework that addresses the unique and emerging risks of cloud environments, with detailed security guidance to ensure meaningful implementation of detection and mitigation capabilities. CSA and the MITRE Corporation have established the Cloud Adversarial, Vectors, Exploits, and Threats (CAVEaT™) collaboration to bring this guidance to the cloud security practitioner. Explore today’s available frameworks with relevance to cloud systems, including CVE, CWE, MITRE ATT&CK, and CAPEC.

The industry’s first authoritative Zero Trust training and credential, the Certificate of Competence in Zero Trust (CCZT), is now available! Recognizing that organizations have different maturity levels for their security program and may be challenged to find skilled staff critical to the development and implementation of a Zero Trust strategy, CSA created the CCZT to help security professionals build knowledge to drive the definition, implementation and management of Zero Trust.

Align your organization with the trusted leader in cloud security and access the knowledge and connections needed to navigate the cloud. CSA's activities, knowledge and extensive network benefit the entire community impacted by cloud — from providers and customers, to governments, entrepreneurs and the assurance industry — and provide a forum through which diverse parties can work together to create and maintain a trusted cloud ecosystem. Learn more about how to get involved with CSA as an organization or as an individual.