Welcome to the Cloud Security Alliance
The Cloud Security Alliance (CSA) is the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment.
Latest News from CSA

New CCM Mapping: Payment Card Industry Data Security Standard
The Cloud Security Alliance and the Cloud Controls Matrix (CCM) Working Group would like to announce a new update to CCM v4.0.9. This update and release incorporates an additional mapping in the CCMv4, that of: the Payment Card Industry Data Security Standard (PCI DSS) Version 4. With this update the CCM V4 controls will be now accompanied with a total of twelve (12) mappings.

Machine Identity in Cybersecurity and IAM
Gain a thorough understanding of machine/non-human identities and their significance to your organization. With the increasing use of technology in today's organizations, the concept of identity management has expanded to include machine identities (anything other than human) such as device identities, digital identities, and workload identities. This whitepaper defines machine identities, explores their history and significance, and provides best practices for managing the risks and governance associated with them.

New Training! DevSecOps: Automation
This self-paced course covers DevSecOps processes that automate security into the development cycle. By leveraging these best practices for automation, aid your organization in improving security posture while keeping up with the demands of development speed. Additionally, learn about mitigation techniques, asynchronous testing, delivery pipeline activities, and breaking builds.
Explore Resources

Cloud Assurance
Improve the security and compliance posture of your organization and leverage the controls inside of cloud assurance to build stronger value in your business systems. CSA provides tools and guidance that help entire industries and countries build their own cloud assurance ecosystem. Publish your organization on the STAR Registry, become CCAK certified, or demonstrate your commitment to holistic security by qualifying for Trusted Cloud Provider status.
Core Cloud
Regardless if you already have a well established cloud security program or are starting your cloud migration for the first time, CSA can help you enhance your security strategy. Tap into our substantial database of research and strategies needed for organizations to achieve comprehensive cloud security. Learn about cybersecurity threats from the latest Top Threats to Cloud Computing: Pandemic Eleven, close the skills gap by obtaining your CCSK certificate, and support the work CSA does by joining our community or becoming a corporate member.


Future Cloud
Look beyond the challenges of the current cloud security ecosystem and leverage CSA to help your organization solve tomorrow’s problems, today. Explore innovative technologies and strategies, such as the Zero Trust Advancement Center, Y2Q - the quantum countdown, or our Global Security Base, that will help shape the future of cloud and cybersecurity.
Join the Alliance
CSA harnesses the subject matter expertise of industry practitioners, associations, governments, and its corporate and individual members to offer cloud security-specific research, education, certification, events and products.
Press Releases
EU Cloud Code of Conduct Collaborates with Cloud Security Alliance to Further Harmonize GDPR Compliance
September 20, 2023
Cloud Security Alliance Maps Cloud Controls Matrix (CCM) to Payment Card Industry Data Security Standard (PCI DSS) v4.0
September 19, 2023
Cloud Security Alliance Survey Finds Complexity of Multi-cloud Environments Driving Use of Cloud Native Application Protection Platforms
August 24, 2023
Upcoming CSA Events

.png/)
.png/)
