Download Publication
FaaS Serverless Control Framework (Set) based on NIST 800-53 R5 controls
Release Date: 08/30/2023
Working Group: Serverless
This spreadsheet provides a cybersecurity control framework for Function-as-a-Service (FaaS) serverless deployments. The framework is based on the NIST 800-53 R5 controls and intended to be used by the cloud consumer.
What’s Included:
- Descriptions of each control, including the sub controls, implementation details, why it’s relevant for FaaS, the deployment location, and who’s responsible for it
- The definition of serverless
- A table of NIST security and privacy control families
- Definitions of the control plane components
- An example NIST 800-181 framework
Download this Resource
Prefer to access this resource without
an account?
Download the publication. Download the presentation.
Are you a research volunteer? Request to have your profile displayed on the website here.
Interested in helping develop research with CSA?
Related Certificates & Training
Learn the core concepts, best practices and recommendation for securing an organization on the cloud regardless of the provider or platform. Covering all 14 domains from the CSA Security Guidance v4, recommendations from ENISA, and the Cloud Controls Matrix, you will come away understanding how to leverage information from CSA's vendor-neutral research to keep data secure on the cloud.
Learn more