Rethinking Security for Public Cloud
Blog Published: 02/13/2019
Symantec’s Raj Patel highlights how organizations should be retooling security postures to support a modern cloud environmentBy Beth Stackpole, Writer, SymantecEnterprises have come a long way with cyber security, embracing robust enterprise security platforms and elevating security roles and bes...
Security Spotlight: Financial Services Facing Cyberattacks
Blog Published: 02/12/2019
By Will Houcheime, Product Marketing Manager, BitglassHere are the top cybersecurity stories of recent months:—Customer information exposed in Bankers Life hack—American Express India leaves customers defenseless—Online HSBC accounts breached—Millions of dollars taken from major Pakistani banks—U...
The 12 Most Critical Risks for Serverless Applications
Blog Published: 02/11/2019
By Sean Heide, CSA Research Analyst and Ory Segal, Israel Chapter Board MemberWhen building the idea and thought process around implementing a serverless structure for your company, there are a few key risks one must take into account to ensure the architecture is gathering proper controls when s...
Deciphering DevSecOps
Blog Published: 02/07/2019
Security needs to be an integral part of the DevOps roadmap. Enterprise Strategy Group’s Doug Cahill shows the way By Beth Stackpole, Writer, SymantecSecurity has moved to the forefront of the IT agenda as organizations push forward with digital transformation initiatives. At the same time, Dev...
Bitglass Security Spotlight: Breaches Expose Millions of Emails, Texts, and Call Logs
Blog Published: 02/05/2019
By Will Houcheime, Product Marketing Manager, BitglassHere are the top cybersecurity stories of recent weeks: —773 million email accounts published on hacking forum— Unprotected FBI data and Social Security numbers found online — Millions of texts and call logs exposed on unlocked server—South Ko...
Security Risks and Continuous Development Drive Push for DevSecOps
Blog Published: 01/31/2019
How the need to speed application creation and subsequent iterations has catalyzed the adoption of the DevOps philosophyBy Dwight B. Davis, Writer, SymantecThe sharp rise in cyber security attacks and damaging breaches in recent years has driven a new mantra among both application developers and ...
CCSK Success Stories: From the Financial Sector
Blog Published: 01/24/2019
By the CSA Education TeamThis is the second part in a blog series on Cloud Security Training. Today we will be interviewing an infosecurity professional working in the financial sector. John C Checco is President Emeritus for the New York Metro InfraGard Members Alliance, as well as an Informatio...
Cloud Security Alliance Celebrates 10th Anniversary at CSA Summit at RSA Conference 2019
Press Release Published: 01/24/2019
IBM, Starbucks, Turner CISOs to Give Keynote Addresses SEATTLE – RSA CONFERENCE 2019 - Jan. 24, 2019 –The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment, today anno...
CCM Addenda Updates for Two Additional Standards
Blog Published: 01/21/2019
By the CSA CCM Working GroupWe're happy to announce the publication of the updated Cloud Controls Matrix (CCM) Addenda for the following standards: — German Federal Office for Information Security (BSI) Cloud Computing Compliance Controls Catalogue (C5) — ISO/IEC 27002, ISO/IEC 27017 and ISO/IEC ...
New Cloud Security Alliance Study Finds Cybersecurity Incidents and Misconceptions Both Increase as Critical ERP Systems Migrate to Clouds
Press Release Published: 01/14/2019
Seattle, WA – January 11, 2019 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications and best practices to help ensure a secure cloud computing environment, today released the findings from the first research survey on “Enterprise Re...
Cloud Security Alliance, National Technology Security Coalition Release “Streamlining Vendor IT Security and Risk Assessments” Whitepaper
Press Release Published: 12/20/2018
Report advocates for a new approach to how organizations manage risks, achieve assurance, and enable trust in the cloudSEATTLE – Dec. 20, 2018 –The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure...
Addressing the Skills Gap in Cloud Security Professionals
Blog Published: 12/17/2018
One of the math lessons that has always stuck with me from childhood is that if you took a penny and doubled it every day for a month, it would make you a millionaire. In fact, it wouldn’t even take the whole month, you would be a millionaire on the 28th day. Of course, most of us realize this w...
Cloud Security Alliance Announces 2018 Ron Knode Service Award Recipients
Press Release Published: 12/11/2018
Volunteers recognized for dedication, efforts to furthering cloud security best practicesORLANDO – Dec. 11, 2018 –The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment,...
Cloud Security Alliance to Develop Holistic Cloud Incident Response Whitepaper
Press Release Published: 12/11/2018
Singapore – 11 December, 2018 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment, will be developing a holistic Cloud Incident Response Whitepaper. The framework wi...
Keeping Your Boat Afloat with a Cloud Access Security Broker
Blog Published: 12/07/2018
By Prasidh Srikanth, Senior Product Manager, BitglassIf you were on a sinking ship that was full of holes of various sizes, which ones would you patch first? Probably the big ones. Now, consider this: As an enterprise, you’ve been successfully sailing and securing your corporate data on premises ...
Development of Cloud Security Guidance, with Mapping MY PDPA Standard to CCM Control Domains, Jointly Developed by MDEC and CSA
Blog Published: 12/06/2018
By Ekta Mishra, Research Analyst/APAC, Cloud Security AllianceThe Cloud Security Alliance Cloud Controls Matrix (CCM) provides a controls framework that gives detailed understanding of security concepts and principles that are aligned to the Cloud Security Alliance guidance in 13 domains. The fou...
OneTrust and Cloud Security Alliance Partner to Launch Free Vendor Risk Tool for CSA Members
Blog Published: 12/04/2018
By Gabrielle Ferree, Public Relations and Marketing Manager, OneTrustOneTrust is excited to announce that we have partnered with Cloud Security Alliance to launch a free Vendor Risk Management (VRM) tool.The tool, available to CSA members today, automates the vendor risk lifecycle for compliance...
Cloud Security Alliance and OneTrust Launch Free Vendor Risk Management Tool for CSA Members
Press Release Published: 12/04/2018
Automate the Vendor Risk Management Lifecycle for Compliance with Global Privacy Laws DECEMBER 4, 2018 – SEATTLE – Today the Cloud Security Alliance (CSA) and OneTrust launched a free Vendor Risk Management (VRM) tool to automate the vendor risk lifecycle for compliance with the GDPR, CCPA and ot...
Typical Challenges in Understanding CCSK and CCSP: Technology Architecture
Blog Published: 12/03/2018
By Peter HJ van Eijk, Head Coach and Cloud Architect, ClubCloudComputing.comAs cloud computing is becoming increasingly mainstream, more people are seeking cloud computing security certification. Because I teach prep courses for the two most popular certifications—the Certificate of Cloud Securit...
Bitglass Security Spotlight: US Government Breaches Abound
Blog Published: 11/30/2018
By Jacob Serpa, Product Manager, BitglassHere are the top cybersecurity headlines of recent weeks:—Healthcare.gov breached—US weapons systems contain cybersecurity gaps—Over 35 million US voter records for sale—National Guard faces ransomware attack Healthcare.gov breached 75,000 people had the...
