The cloud has brought a paradigm shift, and security as you know it is changing...

Step ahead of the change.

Critical Controls Implementation for SAP (Part 1)

This document takes a technical and granular approach, including information such as implementation checklists and SAP transaction numbers.

Research by the industry, for the industry

Prepare for the latest threats

Awareness and understanding of the latest technology threats and risks puts enterprises in a better position to prepare and deploy technologies. Download and share the latest threat research:

Top Threats to Cloud

Top Risks for Serverless Environments

Cyber Incident Exchange

Leverage frameworks and architectures that work

Adopt core tools used by government and regulated industries for the use and management of cloud services. Build a foundation for secure cloud environments with proven models for mitigations, countermeasures, and capabilities specific to cloud computing. The following tools have been used by enterprises to implement frameworks, architectures, and approaches:

Cloud Controls and Remediations

Cloud Reference Architecture

Octagon Model for Risk

Innovate from the cloud

Cloud has become the foundation for launching new technologies. Explore emerging technologies that impact the enterprise and adopt industry best practices for implementing and preparing for the future.

Security Controls for IoT

Preparing for Quantum Computers

Blockchain for Security

CSA Knowledge Center

Gain the necessary knowledge to support a smooth cloud transition and beyond with focused training and skills certification from CSA’s education platform.

Certificate of Cloud Auditing Knowledge

Advanced Cloud Security Practitioner Training

Cloud Governance & Compliance

Certificate of Cloud Security Knowledge (CCSK)

Start your pursuit of cloud knowledge by mastering the foundations of cloud security. The CCSK ensures that security professionals understand the nuanced differences between traditional IT environments and modern cloud environments.

Earn your CCSK

Certificate of Cloud Auditing Knowledge (CCAK)

The CCAK is the only credential for industry professionals that demonstrates expertise in the essential principles of auditing cloud computing systems.

Learn more

Build Your Cloud Knowledge

Call for Participation

SECtember is the premier CSA event of the year. Gain recognition as a subject matter expert by speaking at this event or leading a training.

Submit a paper

Cultivate Wisdom

Step into a leadership role

Build relationships with leaders in the industry and take a leadership role in shaping the future. Participating in CSA's activities enables your employees to collaborate with other security professionals, build their expertise in specific areas, and ensure that best practices and standards for the cloud are being implemented.

Learn more

Demonstrate security

Go beyond security and start building trust. Programs like CSA STAR help improve transparency between cloud customers and providers and bridge the communication gap. From streamlining risk assessments to improving your organizations position to offering an option for continuous self-assessments, it allows our industry to unite effectively to secure the cloud.

Become STAR Certified

Join the Alliance


providers listed in
the STAR Registry


active working
groups and initiatives


research downloads


CloudBytes webinars

Latest News

Cloud Security Alliance Opens the Call for Papers for SECtember

February 24, 2020


CSA Continues to Drive Leadership in Cloud Security with New Research

February 24, 2020


Cloud Security Alliance 2020 Initiatives Changing the Face of IT Audit and Cloud Assurance

February 24, 2020


Glenn Gerstell to Share Perspective on What the Digital Revolution Holds in Store for Business at CSA Federal Summit 2020

February 13, 2020


See more

Industry Insights

​Get a grip on data in Box and beyond - for compliance sake.

February 27, 2020


How CSA is Working to Address Privacy

February 25, 2020


The Knowledge Gap, Risk of the Unknown & the Certificate of Cloud Auditing Knowledge

February 24, 2020


Using Open Policy Agent (OPA) to Develop Policy as Code for Cloud Infrastructure

February 21, 2020


See more

Resources & Education

CSA Knowledge Center

Our training platform is a place to access courses and educational resources on vendor-neutral & industry-backed research that stretches your training budget and complements other security certifications on the market.

STAR Registry

STAR verifies cloud providers that are prepared for the cloud. Ensuring trust & transparency in both security and privacy. View organizations who are cloud verified.

CSA Webinars

Our webinars are designed to inform our audience about trending topics, new technologies, and the latest research. It also allows audience members the opportunity to earn CPE Credits.

Upcoming CSA Events

CSA Federal Summit 2020

May 12, 2020, Washington D.C.



For Solution Providers

Showcase your expertise and good practices to a global marketplace. Membership also provides a channel to hear about the cloud challenges experienced by enterprise users. As competition continues to increase, take an active role in shaping the future of IT by setting the tone for future CSA education and research.



Join Circle

Connect with other security professionals from around the world in an exclusive community tailored to cloud security. Whether you are part of a CSA chapter, working group, or a member organization, we have a forum for you.