The industry needs a threat-informed framework that addresses the unique and emerging risks of cloud environments, with detailed security guidance to ensure meaningful implementation of detection and mitigation capabilities. CSA and the MITRE Corporation have established the Cloud Adversarial, Vectors, Exploits, and Threats (CAVEaT™) collaboration to bring this guidance to the cloud security practitioner. Explore today’s available frameworks with relevance to cloud systems, including CVE, CWE, MITRE ATT&CK, and CAPEC.

The industry’s first authoritative Zero Trust training and credential, the Certificate of Competence in Zero Trust (CCZT), is now available! Recognizing that organizations have different maturity levels for their security program and may be challenged to find skilled staff critical to the development and implementation of a Zero Trust strategy, CSA created the CCZT to help security professionals build knowledge to drive the definition, implementation and management of Zero Trust.

Cloud Security Alliance (CSA) and the Cloud Controls Matrix (CCM) WG would like to invite cloud organizations and cloud security experts to participate in this open peer review of the “Final Draft” version of the CCM V4 control ownership & implementation guidelines that is developed according to the Cloud Shared Security Responsibility Model (SSRM).