Cloud 101CircleEventsBlog
Our website will be down for scheduled maintenance on February 13th from 4:00 PM to 5:00 PM PST. We apologize for any inconvenience and appreciate your patience!

Download Publication

Cloud Key Management System with External Origin Key
Cloud Key Management System with External Origin Key
Who it's for:
  • program and project managers
  • security architects
  • developers
  • compliance managers

Cloud Key Management System with External Origin Key

Release Date: 12/02/2021

Working Group: Cloud Key Management

The purpose of this document is to provide general guidance for choosing, planning, and deploying cloud-native key management systems (KMS) where there is a desire or requirement to import key material from an external source. The guidance will provide recommendations that address technical, operational, legal, regulatory, and financial aspects of leveraging a Cloud-Native KMS using EKO. The goal is to optimize business outcomes, including security, agility, cost, and compliance. 
Download this Resource

Prefer to access this resource without an account? Download it now.

Bookmark
Share
Related resources
Zero Trust Guidance for Small and Medium Size Businesses (SMBs) - Japanese Translation
Zero Trust Guidance for Small and Medium Size B...
Cloud Security for Startups 2024 - Japanese Translation
Cloud Security for Startups 2024 - Japanese Tra...
Cybersecurity and the Data Lifecycle
Cybersecurity and the Data Lifecycle
BeyondTrust Breach: A Wake-Up Call for Remote Access Security
BeyondTrust Breach: A Wake-Up Call for Remote Access Security
Published: 02/07/2025
3 Important Tips for Effective Employee Security Awareness
3 Important Tips for Effective Employee Security Awareness
Published: 02/06/2025
Implementing CCM: Ensure Secure Software with the Application and Interface Security Domain
Implementing CCM: Ensure Secure Software with the Application and I...
Published: 02/05/2025
Bias Testing for AI in the Workplace: Why Companies Need to Identify Bias Now
Bias Testing for AI in the Workplace: Why Companies Need to Identif...
Published: 02/05/2025

Acknowledgements

Michael Born
Michael Born
Director, Security Consulting

Michael Born

Director, Security Consulting

Michael has worked in and around Information Technology and Information Security for over ten (10) years with the majority of his experience in Application Security and Penetration Testing. Michael is the author of Binary Analysis Cookbook by Packt Publishing, enjoys participating in local Information Security groups such as The Omaha Chapter of OWASP, DC402, and often contributes CTF challenges to Kernelcon in Omaha, NE. When n...

Read more

Paul Rich
Paul Rich
Executive Director, Data Management & Protection

Paul Rich

Executive Director, Data Management & Protection

Paul Rich is the executive director, data management and protection for JPMorgan Chase & Co., where he leads the strategy and implementation within the company for unstructured data protection both in the cloud and on-premises. He is the co-chair of the CSA Cloud Key Management Working Group, which he envisions as a means of hearing diverse perspectives on the use of cloud services and expectations for both data privacy and secu...

Read more

Michael Roza
Michael Roza
Risk, Audit, Control and Compliance Professional at EVC

Michael Roza

Risk, Audit, Control and Compliance Professional at EVC

Since 2012, Michael Roza has been a pivotal member of the Cloud Security Alliance (CSA) family. He has contributed to over 125 projects, as a Lead Author or Author/Contributor and many more as a Reviewer/Editor.
Michael's extensive contributions encompass critical areas including Artificial Intelligence, Zero Trust/Software Defined Perimeter, Internet of Things, Top Threats, Cloud Control Matrix, DevSecOps, and Key Management. H...

Read more

Mike Schrock
Mike Schrock
Senior Director Global Business Development – Cloud Strategy

Mike Schrock

Senior Director Global Business Development – Cloud Strategy

Mike Schrock joined Thales Group (formally Gemalto) in 2015 as the Senior Director, Business Development, managing Cloud Service Provider Strategy. Mr. Schrock is passionate about and has championed digital transformation for over twenty years in his technology alliance and executive management experience, particularly in the digital, cloud and network security, internet and mobile sectors. Prior to joining Gemalto, he held executive roles ...

Read more

James Underwood
James Underwood
Senior Security Architect at Blackbaud, Inc

James Underwood

Senior Security Architect at Blackbaud, Inc

Marina Bregkou
Marina Bregkou
Senior Research Analyst, CSA EMEA

Marina Bregkou

Senior Research Analyst, CSA EMEA

Damian Crosby Headshot Missing
Damian Crosby

Damian Crosby

Iain Beveridge
Iain Beveridge
Senior Product Marketing Manager

Iain Beveridge

Senior Product Marketing Manager

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training