EU GDPR vs US: What Is Personal Data?
Blog Published: 08/20/2018
By Rich Campagna, Chief Marketing Officer, BitglassMay 25, 2018—GDPR enforcement day,—has come and gone with little fan fare (and about 6 quadrillion privacy policy updates), but that doesn't mean we all know what to do to get into compliance. In fact, some measures put only one third of organiza...
Cloud Security Alliance Releases Malaysia Financial Sector Cloud Adoption Report
Press Release Published: 08/20/2018
Survey offers insight into areas of cloud adoption, IT security budgets, cloud computing, cyber security skills KUALA LUMPUR, MALAYSIA – August 20, 2018 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to hel...
CVE and Cloud Services, Part 1: The Exclusion of Cloud Service Vulnerabilities
Blog Published: 08/13/2018
By Kurt Seifried, Director of IT, Cloud Security Alliance and Victor Chin, Research Analyst, Cloud Security AllianceThe vulnerability management process has traditionally been supported by a finely balanced ecosystem, which includes such stakeholders as security researchers, enterprises, and vend...
CSA Releases Top Threats to Cloud Computing: Deep Dive
Press Release Published: 08/08/2018
Paper identifies chief cloud security risks, how they fit in a greater security analysis BLACKHAT LAS VEGAS – AUGUST 8, 2018 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications and best practices to help ensure a secure clou...
CSA, OWASP Issue Updated Guidance for Secure Medical Device Deployment
Press Release Published: 08/07/2018
Report includes enhanced sections on purchasing and mechanism controls, as well as relevant FDA guidance BLACKHAT LAS VEGAS – AUGUST 7, 2018 –The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications and best practices to help ensure...
Software-Defined Perimeter Architecture Guide Preview
Blog Published: 07/31/2018
Part 1 in a four-part series.By Jason Garbis, Vice President/Secure Access Products, Cyxtera Technologies Inc.The Software-Defined Perimeter (SDP) Working Group was founded five years ago, with a mission to promote and evangelize a new, more secure architecture for managing user access to applica...
Convincing Organizations to Say “Yes to InfoSec”
Blog Published: 07/20/2018
By Jon-Michael C. Brook, Principal, Guide Holdings, LLCSecurity departments have their hands full. The first half of my career was government-centric, and we always seemed to be the "no" team, eliminating most initiatives before they started. The risks were often found to outweigh the benefits, a...
What Is a CASB?
Blog Published: 07/16/2018
By Dylan Press, Director of Marketing, AvananEmail is the #1 attack vector. Cloud Account Takeover is the #1 attack target. A CASB is the best way to protect against these threats. Gartner first defined the term Cloud Access Security Broker (CASB) in 2011, when most IT applications were hosted i...
Avoiding Cyber Fatigue in Four Easy Steps
Blog Published: 07/12/2018
By Jon-Michael C. Brook, Principal, Guide Holdings, LLCCyber alert fatigue. In the cybersecurity space, it is inevitable. Every day, there will be a new disclosure, a new hack, a new catchy title for the latest twist on an old attack sequence. As a 23-year practitioner, the burnout is a real thin...
Methodology for the Mapping of the Cloud Controls Matrix
Blog Published: 07/09/2018
By Victor Chin, Research Analyst, Cloud Security AllianceThe Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) provides fundamental security principles to guide cloud vendors and cloud customers seeking to assess the overall security risk of a cloud service. To reduce compliance fatigue i...
Cloud Migration Strategies and Their Impact on Security and Governance
Blog Published: 06/29/2018
By Peter HJ van Eijk, Head Coach and Cloud Architect, ClubCloudComputing.comPublic cloud migrations come in different shapes and sizes, but I see three major approaches. Each of these has very different technical and governance implications.Three approaches to cloud migrationCompanies dying to ge...
Top Security Tips for Small Businesses
Blog Published: 06/27/2018
By Jon-Michael C. Brook, Principal, Guide Holdings, LLCMost small businesses adopt some sort of cloud offering, be it Software as a Service like Quickbooks or Salesforce, or even renting computers in Amazon Web Services or Microsoft’s Azure, in an Infrastructure as a Service environment. You get ...
CCM v3 Introduces Reverse Mappings, Gap Analysis
Blog Published: 06/26/2018
By Sean Cordero, VP of Cloud Strategy, NetskopeSince its introduction in 2010, the Cloud Security Alliance’s Cloud Control Matrix (CCM) has led the industry in the measurement of cloud service providers (CSP). The CCM framework continues to deliver for CSPs and cloud consumers alike a uniform set...
Cybersecurity Trends and Training Q and A
Blog Published: 06/22/2018
By Jon-Michael C. Brook, Principal, Guide Holdings, LLCQ: Why is it important for organizations and agencies to stay current in their cybersecurity training?A: Changes accelerate in technology. There's an idea called Moore's Law, named after Gordon Moore working with Intel, that the power of a mi...
Cybersecurity Certifications That Make a Difference
Blog Published: 06/14/2018
By Jon-Michael C. Brook, Principal, Guide Holdings, LLCThe security industry is understaffed. By a lot. Previous estimates by the Ponemon Institute suggest as much as 50 percent underemployment for cybersecurity positions. Seventy percent of existing IT security organizations are understaffed and...
Microsoft Workplace Join Part 2: Defusing the Security Timebomb
Blog Published: 06/13/2018
By Chris Higgins, Technical Support Engineer, BitglassIn my last post, I introduced Microsoft Workplace Join. It’s a really convenient feature that can automatically log users in to corporate accounts from any devices of their choosing. However, this approach essentially eliminates all sense of s...
Cloud Security Alliance Issues Recommendations on Firmware Integrity in the Cloud Data Center
Press Release Published: 06/12/2018
Group calls for more standardization from hardware manufacturers to improve security SEATTLE, WA – JUNE 12, 2018 –The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications and best practices to help ensure a secure cloud computing env...
Firmware Integrity in the Cloud Data Center
Blog Published: 06/12/2018
By John Yeoh, Research Director/Americas, Cloud Security AllianceAs valued members, we wanted you to be among the first to hear about the newest report out from CSA—Firmware Integrity in the Cloud Data Center, in which key cloud providers and datacenter development stakeholders share their though...
New Software-Defined Perimeter Glossary Sheds Light on Industry Terms
Blog Published: 06/12/2018
The Cloud Security Alliance's Software Defined Perimeter Working Group set out to author a comprehensive resource on the terms and definitions within software defined perimeter (SDP) architectures. SDP has changed since the working group's inception in 2014, so the Working Group went about crea...
Continuous Monitoring in the Cloud
Blog Published: 06/11/2018
By Michael Pitcher, Vice President, Technical Cyber Services, Coalfire FederalI recently spoke at the Cloud Security Alliance’s Federal Summit on the topic “Continuous Monitoring / Continuous Diagnostics and Mitigation (CDM) Concepts in the Cloud.” As government has moved and will continue to mov...
