The Use of Blockchain in Healthcare: A Collaboration Between Two CSA Working Groups
Blog Published: 08/02/2021
The unique attributes of healthcare data make it a prime target for nefarious actors. Predictably, healthcare information is tightly regulated by privacy and security laws in the United States, the European Union and international rules governing cloud data storage. The data’s high value, coup...
How is CSA STAR Different From ISO 27001 and SOC 2?
Blog Published: 08/02/2021
The STAR Registry lists cloud solution providers and security providers that have earned a cloud compliance certification from CSA or submitted a cloud security self-assessment questionnaire. While STAR Level 1 is a basic Yes/No or N/A question set to self-declare your compliance with the Clou...
Understanding Cloud Drift Enables Zero Trust Cloud Management
Blog Published: 08/09/2021
This blog was originally published by OpsCompass here.Written by John Grange, OpsCompass.True Insight into Your Security Posture and Drift is Key to Zero-TrustIn the cloud everything is configurable software. This sounds a little obvious, if not trite, but it actually represents an important i...
How Can 3DS Authentication Enhance My Payments Flow?
Blog Published: 05/23/2023
Originally published by TokenEx. As the rapid growth of ecommerce platforms and digital payments continues, the amount of card-not-present (CNP) transactions has increased. While this can provide extra convenience for the cardholder, merchants must engage with digital channels to manage activi...
Two Top Cybersecurity Organizations Issue Joint Bulletin on the Importance of Cloud Scoping
Press Release Published: 08/05/2021
PCI Security Standards Council (PCI SSC) and the Cloud Security Alliance (CSA) join forces to highlight properly scoping cloud environmentsWashington, D.C., August 5, 2021 – Today the PCI Security Standards Council (PCI SSC) and the Cloud Security Alliance (CSA) issued a joint bulletin to high...
The Importance of Properly Scoping Cloud Environments
Blog Published: 08/05/2021
PCI Security Standards Council (PCI SSC) and the Cloud Security Alliance (CSA) recently released a joint industry threat bulletin highlighting the importance of properly scoping cloud environments. In this blog, the PCI SSC and CSA share guidance and best practices for properly scoping cloud e...
Top 20 Dockerfile Best Practices
Blog Published: 08/10/2021
This blog was originally published by Sysdig here.Written by Álvaro Iradier, Sysdig.Learn how to prevent security issues and optimize containerized applications by applying a quick set of Dockerfile best practices in your image builds.If you are familiar with containerized applications and mic...
The Visionary CCM/CAIQ v4 Early Adopters
Blog Published: 08/06/2021
This blog was updated on 8/16/21 with the news that organizations can now submit CAIQ v4 to the STAR Registry.The Cloud Controls Matrix (CCM) is a cybersecurity control framework for cloud computing aligned to CSA best practices and is considered the de-facto standard for cloud security and pr...
Jen Easterly, Director of the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) to Headline Cloud Security Alliance’s SECtember
Press Release Published: 08/11/2021
Premier cloud event offers insight into trending topics such as digital transformation, Zero Trust, and cyber-supply chain risk managementSEATTLE – Aug. 11, 2021 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications and best pract...
SaaS Security: Risks and Mitigation Methods
Blog Published: 08/16/2021
Written by Dipen Rana and Pooja Patil, TCS As a pandemic-triggered hybrid work model settles in, many enterprises are moving onto the cloud for better agility and greater efficiency. With the cloud offering subscription-based models and eliminating infrastructure cost, organizations have the f...
Security Agents Don’t Belong In Your Cloud!
Blog Published: 08/18/2021
This blog was originally published by Blue Hexagon here. Written by Saumitra Das, Blue Hexagon. COVID-19 has significantly accelerated migration to the cloud as organizations enable an increasingly remote workforce and adopt cloud-native services to serve increasingly online customers. Unfortu...
Why IaaS Security Should be a Priority
Blog Published: 08/20/2021
This blog was originally published by Bitglass here. Written by Jonathan Andresen, Bitglass. Why are CIOs and IT organizations prioritizing investment in cloud infrastructure? The answer is simple: to better support virtual workforces, supply chains, and partners. Getting the most value out of...
CCM Testimonial: The Advantages and Future of the Cloud Controls Matrix
Blog Published: 08/12/2021
The Cloud Controls Matrix (CCM) is composed of 197 control objectives that cover all key aspects of cloud technology. It can be used as a tool for the systematic assessment of cloud implementation and provides guidance on which security controls should be implemented by which actor within the ...
C-Level Stakeholders to Take on Digital Transformation’s Impact on Security Strategies at CxO Trust Summit
Press Release Published: 08/17/2021
Event to provide CISOs, other C-level stakeholders with unique insight on navigating companies through today’s cybersecurity challengesSEATTLE – Aug. 17, 2021 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications, and best practic...
Secure Containers and Microservices Series
Blog Published: 08/18/2021
Last updated: May 9, 2024CSA’s Secure Containers and Microservices SeriesApplication containers and a microservices architecture, as defined in NIST SP 800-180, are being used to design, develop and deploy applications leveraging agile software development approaches such as Development Operat...
Cloud Security Alliance’s STAR Registry Now Accepting Version 4 of CAIQ
Press Release Published: 08/19/2021
SEATTLE – Aug. 19, 2021 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud computing environment, is pleased to announce that cloud service providers (CSPs) are now able to subm...
Five Recommendations for Securing Cloud Containers
Blog Published: 08/19/2021
Written by the members of the Security Guidance Working Group. This blog came from Domain 8 of the CSA Security Guidance for Cloud Computing v4.Understanding the impacts of virtualization on security is fundamental to properly architecting and implementing cloud security. In this blog, we will...
STAR Testimonial: CSA STAR + SOC2 - From Readiness to Attestation
Blog Published: 08/20/2021
CSA’s STAR Attestation is the first cloud-specific attestation program designed to quickly assess and understand the types and rigor of security controls applied by cloud service providers. This is a collaboration between CSA and the AICPA to provide guidelines for CPAs to conduct SOC2 engage...
What are the Most Common Cloud Computing Service Delivery Models?
Blog Published: 08/24/2021
This blog was originally published by Alert Logic here.Written by Angelica Torres-Corral, Alert Logic.Cloud computing has transformed the way companies use technology, and your organization stands to gain a lot from migrating to a cloud solution. But which service delivery model is right for y...
The Future of Work is Hybrid – Is Your Security Ready?
Blog Published: 08/25/2021
This blog was originally published by Bitglass here.Written by Jonathan Andresen, Bitglass.It wasn’t that long ago that most of us used to work in an office. Fifteen months into the global COVID pandemic it’s now certain that the future will not be a full return to the office or a continuation...
