Download Publication

Cloud Security for Startups
Release Date: 11/20/2017
As a Software-as-a-Service (SaaS) startup, it’s important to build solid security foundations in order to gain and maintain customers’ trust. SaaS startups should view security as an essential foundation of their company, as well as a competitive advantage that influences potential customers. In this document, we provide an outline of cloud security best practices that SaaS organizations should follow, including guidelines for application security, platform security, and security management, and provide some quick tips along the way. This document provides a security roadmap that you can follow as your company progresses through its cloud journey. We also provide a list of which controls should be implemented during each phase of a startup’s growth.
- Authentication and authorization
- Secure software development lifecycle (SSDLC)
- Management dashboard
- Data flows and network separation
- Encryption and key management
- Transparency
- Industry standards
- Incident response
Download this Resource
Prefer to access this resource without an account? Download it now.
Related Resources
Acknowledgements

Srinivas Tatipamula
Principal Security Advisor, Fairfax
C-CISO|CISSP|CISA|AWS CSS|AWS CSA|CDPSE|CISM|CGEIT|CRISC|ISO 27000LA|CCSK|ITIL-F|PMP|Bachelor of Economics (Hons)|Bachelor of Law| MS in Digital Forensics
Overall 30 plus years in IT and over 18 years in Cyber Security
Publications:
1. Cloud Security Alliance Internet of Things (IoT) Working Group IoT Security Controls Guide Version Published March 2019
2. CSA IoT Controls Matrix March 2019
3. ...

Michael Roza
Risk, Audit, Control and Compliance Professional at EVC
Moshe Ferber
CCSK, CCSP, CCAK official instructor, Chairman at Cloud Security Alliance, Israel

Alexandre Caramelo Pinto

Yael Nishry

Shahar Geiger Maor

Marius Aharonovich

Rich Campagna

Scott Kennedy

Ron Peled

Yuval Reut

Ofer Smadar

Omer Taran

Govindasamy Chinnu

Kyle McAuliffe

Gurpreet Sahota

Zeal Somani

James Stewart

Peter van Eijk
Head Coach at ClubCloudComputing.com
Dr. Peter van Eijk is one of the world's most experienced cloud trainers. He offers CCSK as an instructor-led online course, as well as in-person. He is an authorized CSA CCSK (since 2011) and (ISC)2 CCSP trainer with a passion to make you more effective in your work.
Related Certificates & Training

Learn more