Cloud 101CircleEventsBlog
Help shape the future of cloud security! Take our quick survey on SaaS Security and AI.

All Articles

All Articles
Learn About the CSA STAR Registry

Press Release Published: 08/16/2011

The Cloud Security Alliance announces two upcoming opportunities to learn more about its CSA STAR Registry. These public webcast briefings will be held August 18th and 23rd and will cover general information about the STAR Registry and the proper use of linked documents from the GRC Stack. * C...

Cloud Hosting and Security Demystified

Blog Published: 08/16/2011

I am always amazed when I read the daily cloud blogs, articles and news headlines. Any given day will bring conflicting points of view by cloud industry experts and pundits on how secure clouds are, both private and public. There never seems to be a real consensus on how far security in the clou...

Call For Speakers Now Open for Cloud Security Alliance Innovation Conference 2011

Press Release Published: 08/12/2011

Palo Alto, CA –Aug 12, 2011 – The Cloud Security Alliance (CSA) Silicon Valley chapter today published the call for speakers for the inaugural Cloud Security Alliance Innovation Conference 2011, being held October 6th in Silicon Valley. In the spirit of the CSA Silicon Valley Chapter’s mission ...

CSA Announces a New Research Initiative Called Cloud Data Governance

Press Release Published: 08/11/2011

The Cloud Security Alliance is starting a new research initiative called Cloud Data Governance. The initial phase of the initiative will be a survey of cloud providers to determine the current industry practices around data governance as articulated by the Information Security Lifecycle Managemen...

Media Advisory: CSA Announces STAR – CSA Security, Trust and Assurance Registry - To Help Users Assess Security of Cloud Providers

Press Release Published: 08/04/2011

Las Vegas, NV – Aug 4, 2011 – The Cloud Security Alliance (CSA) today announced the launch of a new initiative to encourage transparency of security practices within cloud providers. The CSA Security, Trust & Assurance Registry (STAR) is a free, publicly accessible registry that documents the...

Cloud Signaling – The Data Center’s Best Defense

Blog Published: 07/27/2011

By Rakesh Shah, Director, Product Marketing & Strategy at Arbor NetworksRecent high-profile security incidents heightened awareness of how Distributed Denial of Service (DDoS) attacks can compromise the availability of critical Web sites, applications and services. Any downtime can result in...

Pass the Buck: Who 's Responsible for Security in the Cloud?

Blog Published: 07/27/2011

Cloud computing changes the equation of responsibility and accountability for information security and poses some new challenges for enterprise IT. At Vormetric we are working with service providers and enterprises to help them secure and control sensitive data in the cloud with encryption, which...

Call for Volunteers for V.3 Guidance Group 2: GRC, Audit, Physical, BCM, DR

Press Release Published: 07/26/2011

The Cloud Security Alliance and Group 2 GRC, Audit, Physical, BCM, DR Leadership team are looking for volunteers to assist with drafting Domain 2, 4 and 7 of version 3 of CSA’s Security Guidance for Critical Areas of Focus in Cloud Computing. Group 2 is responsible for Governance, Risk Management...

Call for volunteers for V.3 Guidance Group 8: Virtualization and Technology Compartmentalization

Press Release Published: 07/21/2011

The Cloud Security Alliance and Group 8 Virtualization and Technology Compartmentalization Leadership are looking for volunteers to assist with drafting Domain 13 of version 3 of CSA's Security Guidance for Critical Areas of Focus in Cloud Computing. Group 8 is responsible for understanding how t...

HISPI Offers Membership Discounts to CSA Members

Press Release Published: 07/18/2011

HISPI Members Gain Access to Valuable Content and Can Earn CPE Credits Online Lithonia, GA – July 18, 2011 – The Cloud Security Alliance (CSA) and the Holistic Information Security Practitioner Institute (HISPI) are now offering a 50% discount on HISPI membership to all CSA LinkedIn group membe...

PKI Still Matters, Especially in the Cloud

Blog Published: 07/15/2011

By: Merritt MaximDirector of IAM Product MarketingCA Technologies Inc.Infosec veterans probably remember (with a smirk) how Public Key Infrastructure (PKI) was heralded as the next “big thing” in information security at the dawn of the 21st century. While PKI failed to reach the broad adoption ...

Cloud Security Alliance Issues First Cloud Compliance Report For Spain

Press Release Published: 07/12/2011

Spanish Chapter Publishes Report Providing a Methodological Approach to Help Address Compliance Needs in Cloud Computing Madrid, Spain –July 12, 2011 – The Cloud Security Alliance (CSA) today announced that the Spanish Chapter, CSA-ES, has published the first Cloud Compliance Report. This Report...

Understanding Best-in-Class Cloud Security Measures and How to Evaluate Providers

Blog Published: 07/11/2011

By Fahim SiddiquiDespite a broader interest in cloud computing, many organizations have been reluctant to embrace the technology due to security concerns. While today’s businesses can benefit from cloud computing’s on-demand capacity and economies of scale, the model does require they relinquish ...

Watch Out for the Top 6 Cloud Gotchas!

Blog Published: 07/11/2011

By Margaret Dawson, VP of Product Management, HubspanI am a huge proponent of cloud-based solutions, but I also have a bailiwick for people who look to the cloud just for cloud’s sake, and do not take time to do the due diligence. While the cloud can bring strong technical, economic and business...

CSA Announces Licensing Agreement With CSC For Cloudtrust Protocol

Press Release Published: 07/06/2011

Cloud Trust Protocol Provides Enterprises with the Confidence To Bring More Sensitive and Valuable Business Functions to the Cloud Falls Church, VA – July 6, 2011 – Today the Cloud Security Alliance (CSA), a member-driven organization chartered with promoting the use of best practices for pr...

Security as a Service Initial Group Call set for July 5th

Press Release Published: 06/30/2011

The CSA Security as a Service (SecaaS) Working Group will have their first group call on July 5th. The purpose of their research will be to identify consensus definitions of what Security as a Service means, to categorize the different types of Security as a Service and to provide guidance to org...

Call for Volunteers to Upgrade the CSA Cloud Controls Matrix to v1.2

Press Release Published: 06/22/2011

We need smart, motivated volunteers and team leaders who are committed to an early August 2011 completion date. You can prepare yourself by checking out the current CSA Cloud Controls Matrix (v1.1) here: https://cloudsecurityalliance.org/research/projects/cloud-controls-matrix-ccm/ If you want to...

SecaaS Seeks Additional Input on Working Group Proposal

Press Release Published: 06/21/2011

**June 21, 2011 ** – Thank you to those who have contributed to the "Categories of Service" section of our working group proposal. We are still seeking input to all categories. For those who have recently expressed interest in getting involved, send me an email at [email protected]...

Telecom Working Group Charter Finalized

Press Release Published: 06/21/2011

**June 21, 2011 ** – The Cloud Security Alliance (CSA) would like to announce that a finalized Telecom Working Group (TWG) Charter is available to download on the Telecom Working Group page. The working group's web page has also been updated to include current leadership and contributing members....

How Public Cloud Providers Can Improve Their Trustworthiness

Blog Published: 06/16/2011

By Matthew GardinerWhen you meet someone you have never met for the first time, in a place you have never been to, do you trust him? Would you have him hold your wallet for you or would you share some sensitive personal information with him? Of course not. Obviously this person is not trusted b...

Looking for the CCM?

Start using the Cloud Controls Matrix to simplify compliance with multiple standards & regulations.