Cloud 101CircleEventsBlog
Join CSA's Virtual FinCloud Security Summit to explore cloud security solutions, emerging fintech trends, and best practices for secure, compliant financial services.

Download Publication

Recommendations for using a Customer Controlled Key Store
Recommendations for using a Customer Controlled Key Store

Recommendations for using a Customer Controlled Key Store

Release Date: 09/26/2022

Working Group: Cloud Key Management

In the latest from the Cloud Key Management working group, this document provides guidance on how to assess and implement cloud key management services concerning an organization’s needs for key management - it is the responsibility of the customer to then use encryption keys (or other artifacts, such as secrets) in ways that follow encryption best practices. Coverage includes mainstream business and Information technology (IT) usage of hybrid and cloud technologies. 
Download this Resource

Prefer to access this resource without an account? Download it now.

Bookmark
Share
Related resources
Zero Trust Guidance for Critical Infrastructure - Japanese Translation
Zero Trust Guidance for Critical Infrastructure...
Context-Based Access Control for Zero Trust
Context-Based Access Control for Zero Trust
Zero Trust Guidance for Small and Medium Size Businesses (SMBs)
Zero Trust Guidance for Small and Medium Size B...
The EU AI Act: A New Era of AI Governance Began August 1st
The EU AI Act: A New Era of AI Governance Began August 1st
Published: 01/15/2025
Secrets & Non-Human Identity Security in Hybrid Cloud Infrastructure: Strategies for Success
Secrets & Non-Human Identity Security in Hybrid Cloud Infrastructur...
Published: 01/14/2025
The Emerging Cybersecurity Threats in 2025 - What You Can Do To Stay Ahead
The Emerging Cybersecurity Threats in 2025 - What You Can Do To Sta...
Published: 01/14/2025
Next-Gen Cybersecurity with AI: Reshaping Digital Defense
Next-Gen Cybersecurity with AI: Reshaping Digital Defense
Published: 01/10/2025

Acknowledgements

Paul Rich
Paul Rich
Executive Director, Data Management & Protection

Paul Rich

Executive Director, Data Management & Protection

Paul Rich is the executive director, data management and protection for JPMorgan Chase & Co., where he leads the strategy and implementation within the company for unstructured data protection both in the cloud and on-premises. He is the co-chair of the CSA Cloud Key Management Working Group, which he envisions as a means of hearing diverse perspectives on the use of cloud services and expectations for both data privacy and secu...

Read more

Michael Roza
Michael Roza
Risk, Audit, Control and Compliance Professional at EVC

Michael Roza

Risk, Audit, Control and Compliance Professional at EVC

Since 2012, Michael Roza has been a pivotal member of the Cloud Security Alliance (CSA) family. He has contributed to over 125 projects, as a Lead Author or Author/Contributor and many more as a Reviewer/Editor.

Michael's extensive contributions encompass critical areas including Artificial Intelligence, Zero Trust/Software Defined Perimeter, Internet of Things, Top Threats, Cloud Control Matrix, DevSecOps, and Key Management. His lea...

Read more

Michael Born
Michael Born
Director, Security Consulting

Michael Born

Director, Security Consulting

Michael has worked in and around Information Technology and Information Security for over ten (10) years with the majority of his experience in Application Security and Penetration Testing. Michael is the author of Binary Analysis Cookbook by Packt Publishing, enjoys participating in local Information Security groups such as The Omaha Chapter of OWASP, DC402, and often contributes CTF challenges to Kernelcon in Omaha, NE. When n...

Read more

Iain Beveridge
Iain Beveridge
Senior Product Marketing Manager

Iain Beveridge

Senior Product Marketing Manager

Vani Murthy
Vani Murthy
Sr. Information Security Compliance Advisor, Akamai Technologies

Vani Murthy

Sr. Information Security Compliance Advisor, Akamai Technologies

Vani has 20+ years of IT experience in the areas such as Security, Risk, Compliance, Cloud services (IaaS/PaaS/SaaS) architecture

Read more

Marina Bregkou
Marina Bregkou
Senior Research Analyst, CSA EMEA

Marina Bregkou

Senior Research Analyst, CSA EMEA

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training