Documentation of Distributed Ledger Technology and Blockchain Use
Blog Published: 11/27/2018
By Ashish Mehta, Co-chair, CSA Blockchain/Distributed Ledger Working GroupCSA’s newest white paper, Beyond Cryptocurrency: Nine Relevant Blockchain and Distributed Ledger Technology (DLT) Use Cases, aims to identify wider use cases for both technologies beyond just cryptocurrency, an area with wh...
How to Do the Impossible and Secure BYOD
Blog Published: 11/26/2018
By Will Houcheime, Product Marketing Manager, BitglassThe use of cloud tools in the enterprise is becoming increasingly common, enabling employees to collaborate and work incredibly efficiently. On top of this, when employees are allowed to work from their personal devices (known as bring your ow...
International Effort with Collaboration Between Cloud Security Alliance and Huawei Culminated in International Standard ISO/IEC 21878
Press Release Published: 11/26/2018
Singapore – November 26, 2018 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment, is pleased to announce that the international standard ISO/IEC 21878 – Security Gu...
Fixing Your Mis-Deployed NGFW
Blog Published: 11/23/2018
By Rich Campagna, Chief Marketing Officer, BitglassThe Firewall/Next-Gen Firewall has been the cornerstone of information security strategy for decades now. The thing is, changes in network traffic patterns have resulted in most firewalls protecting a smaller and smaller percentage of enterprise ...
Weigh in on the Cloud Control Matrix Addenda
Blog Published: 11/20/2018
Dear Colleagues,The Cloud Security Alliance would like to invite you to review and comment on the Cloud Control Matrix (CCM) addenda for the following standards:—German Federal Office for Information Security (BSI) Cloud Computing Compliance Controls Catalogue (C5). (Add your comments to CCM-C5.)...
CCSK Success Stories: Cloud Security Training from a CTO’s Perspective
Blog Published: 11/19/2018
By the CSA Education TeamWe’re kicking off a series on cloud security training today with a Q&A with the Vice President and CTO of Fusion Risk Management, Cory Cowgill. With a background in enterprise software development spanning multiple industries, Cowgill has multiple certifications inclu...
AWS Cloud: Proactive Security and Forensic Readiness – Part 4
Blog Published: 11/16/2018
Part 4: Detective Controls in AWSBy Neha Thethi, Information Security Analyst, BH Consulting Security controls can be either technical or administrative. A layered security approach to protecting an organization’s information assets and infrastructure should include preventative controls, detecti...
Cloud Security Alliance’s CCSK Wins Cyber Defense Global Award for Leader Cybersecurity Training
Press Release Published: 11/16/2018
SEATTLE, WA – Nov. 16, 2018– The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment, today announced that its Certificate of Cloud Security Knowledge (CCSK), the first cr...
Data Breaches on the Rise in Financial Services
Blog Published: 11/14/2018
By Jacob Serpa, Product Marketing Manager, BitglassFinancial services organizations are a prime target for hackers looking to steal and sell valuable data. This is because these firms handle sensitive information known as PII, personally identifiable information, as well as other financial data. ...
Cloud Security Alliance Releases Minor Update to CCM v3.0.1
Blog Published: 11/12/2018
By the CSA Research TeamThe Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) Working Group has released a minor update for the CCM v3.0.1. This update incorporates mappings to IEC 62443-3-3 and BSI Compliance Controls Catalogue (C5).The CCM is specifically designed to provide fundamental...
Cloud Security Alliance Announces the Release of the Spanish Translation of Guidance 4.0
Blog Published: 11/09/2018
By JR Santos, Executive Vice President of Research, Cloud Security Alliance.The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment, today announced the release of Guidanc...
Seven Reasons Why Proxy-based CASBs Are Required for Office 365
Blog Published: 11/08/2018
By Rich Campagna, Chief Marketing Officer, Bitglass A competing CASB vendor blogged recently on why proxy-based Cloud Access Security Brokers (CASBs) shouldn't be used for Office 365.The post cites "7 reasons," all of which are variations of just one reason: their CASB breaks each time Microsoft ...
Bitglass Security Spotlight: Uber, Apollo, & Chegg
Blog Published: 11/05/2018
By Jacob Serpa, Product Manager, BitglassHere are the top cybersecurity stories of recent weeks:—Uber fined $148 million over cover-up—Apollo database of 200 million contacts breached—Chegg hack exposes 40 million users' credentials—Port of San Diego faces cyberattackUber fined $148 million over ...
Bitglass Security Spotlight: Veeam, Mongo Lock, Password Theft, Atlas Quantum & the 2020 Census
Blog Published: 10/31/2018
By Jacob Serpa, Product Manager, BitglassHere are the top cybersecurity headlines of recent weeks:—440 million email addresses exposed by Veeam—Unprotected MongoDB databases being targeted—42 million emails, passwords, and more leaked—Cold-boot attacks steal passwords and encryption keys—2 billio...
POC the CASB
Blog Published: 10/29/2018
By Rich Campagna, Chief Marketing Officer, BitglassThe Cloud Access Security Broker, or CASB, space has quickly made its way to the mainstream, with organizations of every size and every industry deploying CASBs whenever their data moves beyond the firewall.While ready for primetime and widely de...
Bitglass Security Spotlight: Yale, LifeLock, SingHealth, Malware Evolving & Reddit Breached
Blog Published: 10/25/2018
By Jacob Serpa, Product Manager, BitglassHere are the top cybersecurity headlines of recent months:—Future malware to recognize victims' faces—Reddit suffers breach—6 million records of Georgian voters exposed—RASPITE Group attacks US infrastructure—Decade-old breach at Yale uncovered—Bug exposes...
In Europe, Cloud Is the New Default
Blog Published: 10/19/2018
By Salim Hafid, Senior Product Marketing Manager, BitglassIf you keep up with the blog, you'll remember our 2018 global cloud adoption report, wherein thousands of organizations deployed cloud apps since we last conducted our automated analysis of over 100,000 firms. Many in EMEA wanted to know h...
Office 365 Security: It Takes Two to Tango
Blog Published: 10/17/2018
Many cloud apps – including Office 365 – operate under a shared responsibility model. Here’s what that means for your company By Beth Stackpole, Feature Writer, Symantec Security concerns, once a long-standing hurdle to cloud deployment, may be on the wane, but the issue is still very much ali...
Guideline on Effectively Managing Security Service in the Cloud
Blog Published: 10/16/2018
By Dr. Kai Chen, Director of Cybersecurity Technology, Huawei Technologies Co. Ltd.The cloud computing market is growing ever so rapidly. Affordable, efficient, and scalable, cloud computing remains the best solution for most businesses, and it is heartening to see the number of customers deployi...
How Can the Financial Industry Innovate Faster?
Blog Published: 10/15/2018
By Peter HJ van Eijk, Head Coach and Cloud Architect, ClubCloudComputing.comHow can the financial industry innovate faster? Why do non-technical people need to have a basic understanding of cloud technology?Imagine this scenario. Davinci is a company providing a SaaS solution to banks to process ...
