Cybersecurity and Privacy Certification from the Ground Up
Blog Published: 06/04/2018
By Daniele Catteddu, CTO, Cloud Security Alliance The European Cybersecurity Act, proposed in 2017 by the European Commission, is the most recent of several policy documents adopted and/or proposed by governments around the world, each with the intent (among other objectives) to bring clarity ...
Five Cloud Migration Mistakes That Will Sink a Business
Blog Published: 06/05/2018
By Jon-Michael C. Brook, Principal, Guide Holdings, LLCToday, with the growing popularity of cloud computing, there exists a wealth of resources for companies that are considering—or are in the process of—migrating their data to the cloud. From checklists to best practices, the Internet teems ...
Cloud Security Trailing Cloud App Adoption in 2018
Blog Published: 06/06/2018
By Jacob Serpa, Product Marketing Manager, BitglassIn recent years, the cloud has attracted countless organizations with its promises of increased productivity, improved collaboration, and decreased IT overhead. As more and more companies migrate, more and more cloud-based tools arise.In its f...
Microsoft Workplace Join Part 1: The Security Timebomb
Blog Published: 06/08/2018
By Chris Higgins, Technical Support Engineer, BitglassIt’s no secret that enterprise users wish to access work data and applications from a mix of both corporate and personal devices. In order to help facilitate this mix of devices, Microsoft has introduced a new feature called Workplace Join ...
Continuous Monitoring in the Cloud
Blog Published: 06/11/2018
By Michael Pitcher, Vice President, Technical Cyber Services, Coalfire FederalI recently spoke at the Cloud Security Alliance’s Federal Summit on the topic “Continuous Monitoring / Continuous Diagnostics and Mitigation (CDM) Concepts in the Cloud.” As government has moved and will continue to ...
New Software-Defined Perimeter Glossary Sheds Light on Industry Terms
Blog Published: 06/12/2018
The Cloud Security Alliance's Software Defined Perimeter Working Group set out to author a comprehensive resource on the terms and definitions within software defined perimeter (SDP) architectures. SDP has changed since the working group's inception in 2014, so the Working Group went about c...
Firmware Integrity in the Cloud Data Center
Blog Published: 06/12/2018
By John Yeoh, Research Director/Americas, Cloud Security AllianceAs valued members, we wanted you to be among the first to hear about the newest report out from CSA—Firmware Integrity in the Cloud Data Center, in which key cloud providers and datacenter development stakeholders share their tho...
Microsoft Workplace Join Part 2: Defusing the Security Timebomb
Blog Published: 06/13/2018
By Chris Higgins, Technical Support Engineer, BitglassIn my last post, I introduced Microsoft Workplace Join. It’s a really convenient feature that can automatically log users in to corporate accounts from any devices of their choosing. However, this approach essentially eliminates all sense o...
Cybersecurity Certifications That Make a Difference
Blog Published: 06/14/2018
By Jon-Michael C. Brook, Principal, Guide Holdings, LLCThe security industry is understaffed. By a lot. Previous estimates by the Ponemon Institute suggest as much as 50 percent underemployment for cybersecurity positions. Seventy percent of existing IT security organizations are understaffed ...
Cybersecurity Trends and Training Q and A
Blog Published: 06/22/2018
By Jon-Michael C. Brook, Principal, Guide Holdings, LLCQ: Why is it important for organizations and agencies to stay current in their cybersecurity training?A: Changes accelerate in technology. There's an idea called Moore's Law, named after Gordon Moore working with Intel, that the power of a...
CCM v3 Introduces Reverse Mappings, Gap Analysis
Blog Published: 06/26/2018
By Sean Cordero, VP of Cloud Strategy, NetskopeSince its introduction in 2010, the Cloud Security Alliance’s Cloud Control Matrix (CCM) has led the industry in the measurement of cloud service providers (CSP). The CCM framework continues to deliver for CSPs and cloud consumers alike a uniform ...
Top Security Tips for Small Businesses
Blog Published: 06/27/2018
By Jon-Michael C. Brook, Principal, Guide Holdings, LLCMost small businesses adopt some sort of cloud offering, be it Software as a Service like Quickbooks or Salesforce, or even renting computers in Amazon Web Services or Microsoft’s Azure, in an Infrastructure as a Service environment. You g...
Cloud Migration Strategies and Their Impact on Security and Governance
Blog Published: 06/29/2018
By Peter HJ van Eijk, Head Coach and Cloud Architect, ClubCloudComputing.comPublic cloud migrations come in different shapes and sizes, but I see three major approaches. Each of these has very different technical and governance implications.Three approaches to cloud migrationCompanies dying to...
Methodology for the Mapping of the Cloud Controls Matrix
Blog Published: 07/09/2018
By Victor Chin, Research Analyst, Cloud Security AllianceThe Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) provides fundamental security principles to guide cloud vendors and cloud customers seeking to assess the overall security risk of a cloud service. To reduce compliance fatigu...
Avoiding Cyber Fatigue in Four Easy Steps
Blog Published: 07/12/2018
By Jon-Michael C. Brook, Principal, Guide Holdings, LLCCyber alert fatigue. In the cybersecurity space, it is inevitable. Every day, there will be a new disclosure, a new hack, a new catchy title for the latest twist on an old attack sequence. As a 23-year practitioner, the burnout is a real t...
What Is a CASB?
Blog Published: 07/16/2018
By Dylan Press, Director of Marketing, AvananEmail is the #1 attack vector. Cloud Account Takeover is the #1 attack target. A CASB is the best way to protect against these threats. Gartner first defined the term Cloud Access Security Broker (CASB) in 2011, when most IT applications were hoste...
Convincing Organizations to Say “Yes to InfoSec”
Blog Published: 07/20/2018
By Jon-Michael C. Brook, Principal, Guide Holdings, LLCSecurity departments have their hands full. The first half of my career was government-centric, and we always seemed to be the "no" team, eliminating most initiatives before they started. The risks were often found to outweigh the benefits...
Software-Defined Perimeter Architecture Guide Preview
Blog Published: 07/31/2018
Part 1 in a four-part series.By Jason Garbis, Vice President/Secure Access Products, Cyxtera Technologies Inc.The Software-Defined Perimeter (SDP) Working Group was founded five years ago, with a mission to promote and evangelize a new, more secure architecture for managing user access to appl...
CVE and Cloud Services, Part 1: The Exclusion of Cloud Service Vulnerabilities
Blog Published: 08/13/2018
By Kurt Seifried, Director of IT, Cloud Security Alliance and Victor Chin, Research Analyst, Cloud Security AllianceThe vulnerability management process has traditionally been supported by a finely balanced ecosystem, which includes such stakeholders as security researchers, enterprises, and v...
EU GDPR vs US: What Is Personal Data?
Blog Published: 08/20/2018
By Rich Campagna, Chief Marketing Officer, BitglassMay 25, 2018—GDPR enforcement day,—has come and gone with little fan fare (and about 6 quadrillion privacy policy updates), but that doesn't mean we all know what to do to get into compliance. In fact, some measures put only one third of organ...
