Cloud 101CircleEventsBlog
CSA's Continuous Audit Metrics Working Group is expanding! Help shape the future of cloud assurance.

Download Publication

Security Guidance for Critical Areas of Focus in Cloud Computing V2.0
Security Guidance for Critical Areas of Focus in Cloud Computing V2.0

Security Guidance for Critical Areas of Focus in Cloud Computing V2.0

Release Date: 12/02/2009

Working Group: Security Guidance

The guidance provided herein is the second version of the Cloud Security Alliance document,
“Security Guidance for Critical Areas of Focus in Cloud Computing”, which was originally
released in April 2009.
Download this Resource

Prefer to access this resource without an account? Download it now.

Bookmark
Share
Related resources
Security Guidance v4.0 Info Sheet
Security Guidance v4.0 Info Sheet
Security Guidance for Critical Areas of Focus in Cloud Computing v4.0
Security Guidance for Critical Areas of Focus i...
FedRAMP Cloud Controls Matrix v3.0.1 Candidate Mapping
FedRAMP Cloud Controls Matrix v3.0.1 Candidate ...
New Year, New Security Awareness Training—How to Implement a Role-Based Training Program
New Year, New Security Awareness Training—How to Implement a Role-B...
Published: 02/08/2024
What is the Shared Responsibility Model in the Cloud?
What is the Shared Responsibility Model in the Cloud?
Published: 01/25/2024
The Difference Between Securing Custom-Developed vs. Commercial Off-the-Shelf Software
The Difference Between Securing Custom-Developed vs. Commercial Off...
Published: 12/20/2023
Are You a Fit for CSA’s Advanced Cloud Security Practitioner (ACSP) Training?
Are You a Fit for CSA’s Advanced Cloud Security Practitioner (ACSP)...
Published: 12/07/2023

Acknowledgements

Rich Mogull
Rich Mogull
CEO at Securosis

Rich Mogull

CEO at Securosis

Rich is the VP of Product for DisruptOPS and Analyst and CEO of Securosis. With twenty years of experience in information security, physical security, and risk management, Rich is one of the foremost experts on cloud security, having driven development of the Cloud Security Alliance’s V4 Guidance and the associated CCSK training curriculum. He is a prolific writer and fe...

Read more

Vern Williams Headshot Missing
Vern Williams

Vern Williams

This person does not have a biography listed with CSA.

Randolph Barr Headshot Missing
Randolph Barr

Randolph Barr

This person does not have a biography listed with CSA.

Lee Newcombe Headshot Missing
Lee Newcombe

Lee Newcombe

This person does not have a biography listed with CSA.

Brian O'Higgins Headshot Missing
Brian O'Higgins

Brian O'Higgins

This person does not have a biography listed with CSA.

Dennis Hurst Headshot Missing
Dennis Hurst

Dennis Hurst

This person does not have a biography listed with CSA.

Jean Pawluk Headshot Missing
Jean Pawluk

Jean Pawluk

This person does not have a biography listed with CSA.

Anish Mohammed Headshot Missing
Anish Mohammed

Anish Mohammed

This person does not have a biography listed with CSA.

C. Warren Axelrod Headshot Missing
C. Warren Axelrod

C. Warren Axelrod

This person does not have a biography listed with CSA.

Jeff Spivey Headshot Missing
Jeff Spivey

Jeff Spivey

This person does not have a biography listed with CSA.

Jim Hietala Headshot Missing
Jim Hietala

Jim Hietala

This person does not have a biography listed with CSA.

Francoise Gilbert Headshot Missing
Francoise Gilbert

Francoise Gilbert

This person does not have a biography listed with CSA.

Adrian Secombe Headshot Missing
Adrian Secombe

Adrian Secombe

This person does not have a biography listed with CSA.

Jeffrey Ritter Headshot Missing
Jeffrey Ritter

Jeffrey Ritter

This person does not have a biography listed with CSA.

Wing Ko Headshot Missing
Wing Ko

Wing Ko

This person does not have a biography listed with CSA.

Joe Wallace Headshot Missing
Joe Wallace

Joe Wallace

This person does not have a biography listed with CSA.

Glenn Brunette Headshot Missing
Glenn Brunette

Glenn Brunette

This person does not have a biography listed with CSA.

Jens Laundrup
Jens Laundrup
Chief Security Engineer and Executive Consultant, Emagined Security Inc.

Jens Laundrup

Chief Security Engineer and Executive Consultant, Emagined Security Inc.

Jens Laundrup, Chief Security Engineer and Executive Consultant, Emagined Security Inc., has spent over 30 years in the Information Security space to include numerous security engineering disciplines including Military, Government and Corporate Information Security, Compliance Program Design, Architecture Design, and Network & Physical Security. Mr. Laundrup has led the development and design of cutting-edge risk-based security programs and...

Read more

Richard Zhao
Richard Zhao
Chief Strategy Officer of NSFOCUS

Richard Zhao

Chief Strategy Officer of NSFOCUS

Dr. Liang ZHAO (Richard) manages the research team, strategic planning, and fosters innovations at NSFOCUS. He obtained his B.Sc, M.Sc. and Ph.D degrees from Peking University at 1991, 1994, 1997 respectively. Liang majored physics and fiber-optic communications and has over 15 years of professional experience in telecom and network security areas. He owns certifications of CISSP, ITIL, BS7799.

Prior to his current position, he was th...

Read more

Michael Sutton Headshot Missing
Michael Sutton
CISO, Zscaler

Michael Sutton

CISO, Zscaler

This person does not have a biography listed with CSA.

Justin Foster Headshot Missing
Justin Foster

Justin Foster

This person does not have a biography listed with CSA.

Jon Callas Headshot Missing
Jon Callas

Jon Callas

This person does not have a biography listed with CSA.

David Lingenfelter
David Lingenfelter
Security and Compliance, MaaS360

David Lingenfelter

Security and Compliance, MaaS360

David is a seasoned security professional with nearly 20 years of experience in risk management, information security, compliance, and policy development. Throughout his career David has performed risk and vulnerability assessments along with making recommendations on network and system design improvements. David’s career has spanned from traditional hardware based security architectures to cloud technologies and virtual environments.

Read more

Richard Austin Headshot Missing
Richard Austin

Richard Austin

This person does not have a biography listed with CSA.

John Arnold Headshot Missing
John Arnold

John Arnold

This person does not have a biography listed with CSA.

Subra Kumaraswamy Headshot Missing
Subra Kumaraswamy

Subra Kumaraswamy

This person does not have a biography listed with CSA.

Girish Bhat Headshot Missing
Girish Bhat

Girish Bhat

This person does not have a biography listed with CSA.

Pamela Fusco Headshot Missing
Pamela Fusco

Pamela Fusco

This person does not have a biography listed with CSA.

Ernie Hayden Headshot Missing
Ernie Hayden

Ernie Hayden

This person does not have a biography listed with CSA.

David Mortman Headshot Missing
David Mortman

David Mortman

This person does not have a biography listed with CSA.

Carlo Espiritu Headshot Missing
Carlo Espiritu

Carlo Espiritu

This person does not have a biography listed with CSA.

Dov Yoran Headshot Missing
Dov Yoran

Dov Yoran

This person does not have a biography listed with CSA.

Jesus Luna Headshot Missing
Jesus Luna

Jesus Luna

This person does not have a biography listed with CSA.

Anton Chuvakin Headshot Missing
Anton Chuvakin

Anton Chuvakin

This person does not have a biography listed with CSA.

M S Prasad Headshot Missing
M S Prasad

M S Prasad

This person does not have a biography listed with CSA.

Scott Matsumoto Headshot Missing
Scott Matsumoto

Scott Matsumoto

This person does not have a biography listed with CSA.

Yvonne Wilson Headshot Missing
Yvonne Wilson

Yvonne Wilson

This person does not have a biography listed with CSA.

Christofer Hoff Headshot Missing
Christofer Hoff

Christofer Hoff

This person does not have a biography listed with CSA.

Michael Johnson Headshot Missing
Michael Johnson

Michael Johnson

This person does not have a biography listed with CSA.

Sean Catlett
Sean Catlett
Chief Security Officer

Sean Catlett

Chief Security Officer

Sean Catlett is the Chief Security Officer at Slack, where he oversees product security, GRC, and security engineering and operations. Prior to Slack, Sean was the first CISO for Reddit, where he built the company’s dedicated Security and Privacy functions, protecting more than 430 million monthly active users around the world. In addition to executive roles at industry-leading security software companies, Sean has held senior leadership ro...

Read more

Shail Khiyara Headshot Missing
Shail Khiyara

Shail Khiyara

This person does not have a biography listed with CSA.

Shawn Chaput Headshot Missing
Shawn Chaput

Shawn Chaput

This person does not have a biography listed with CSA.

Alex Hutton Headshot Missing
Alex Hutton

Alex Hutton

This person does not have a biography listed with CSA.

Alexander Meisel Headshot Missing
Alexander Meisel

Alexander Meisel

This person does not have a biography listed with CSA.

Alexander Windel Headshot Missing
Alexander Windel

Alexander Windel

This person does not have a biography listed with CSA.

Anthony Licciardi Headshot Missing
Anthony Licciardi

Anthony Licciardi

This person does not have a biography listed with CSA.

Beau Monday Headshot Missing
Beau Monday

Beau Monday

This person does not have a biography listed with CSA.

Arthur J. Hedge III Headshot Missing
Arthur J. Hedge III

Arthur J. Hedge III

This person does not have a biography listed with CSA.

Beth Cohen Headshot Missing
Beth Cohen

Beth Cohen

This person does not have a biography listed with CSA.

Bikram Barman Headshot Missing
Bikram Barman

Bikram Barman

This person does not have a biography listed with CSA.

Colin Watson Headshot Missing
Colin Watson

Colin Watson

This person does not have a biography listed with CSA.

David Jackson Headshot Missing
David Jackson

David Jackson

This person does not have a biography listed with CSA.

David Sherry Headshot Missing
David Sherry

David Sherry

This person does not have a biography listed with CSA.

David Tyson Headshot Missing
David Tyson

David Tyson

This person does not have a biography listed with CSA.

Don Blumenthal Headshot Missing
Don Blumenthal

Don Blumenthal

This person does not have a biography listed with CSA.

Erick Dahan Headshot Missing
Erick Dahan

Erick Dahan

This person does not have a biography listed with CSA.

Erik Peterson Headshot Missing
Erik Peterson

Erik Peterson

This person does not have a biography listed with CSA.

Geir Arild Engh-Hellesvik Headshot Missing
Geir Arild Engh-Hellesvik

Geir Arild Engh-Hellesvik

This person does not have a biography listed with CSA.

Georg Hess Headshot Missing
Georg Hess

Georg Hess

This person does not have a biography listed with CSA.

Gerhard Eschelbeck Headshot Missing
Gerhard Eschelbeck

Gerhard Eschelbeck

This person does not have a biography listed with CSA.

Greg Kane Headshot Missing
Greg Kane

Greg Kane

This person does not have a biography listed with CSA.

Greg Tipps Headshot Missing
Greg Tipps

Greg Tipps

This person does not have a biography listed with CSA.

James Tiller Headshot Missing
James Tiller

James Tiller

This person does not have a biography listed with CSA.

Jim Arlen Headshot Missing
Jim Arlen

Jim Arlen

This person does not have a biography listed with CSA.

Joe Cupano Headshot Missing
Joe Cupano

Joe Cupano

This person does not have a biography listed with CSA.

Joe McDonald Headshot Missing
Joe McDonald

Joe McDonald

This person does not have a biography listed with CSA.

Joe Stein Headshot Missing
Joe Stein

Joe Stein

This person does not have a biography listed with CSA.

Joel Weise Headshot Missing
Joel Weise

Joel Weise

This person does not have a biography listed with CSA.

Joseph Stein Headshot Missing
Joseph Stein

Joseph Stein

This person does not have a biography listed with CSA.

Kathleen Lossau Headshot Missing
Kathleen Lossau

Kathleen Lossau

This person does not have a biography listed with CSA.

Karen Worstell Headshot Missing
Karen Worstell

Karen Worstell

This person does not have a biography listed with CSA.

Luis Morales Headshot Missing
Luis Morales

Luis Morales

This person does not have a biography listed with CSA.

Michael Reiter Headshot Missing
Michael Reiter

Michael Reiter

This person does not have a biography listed with CSA.

Mike Kavis Headshot Missing
Mike Kavis

Mike Kavis

This person does not have a biography listed with CSA.

Patrick Sullivan Headshot Missing
Patrick Sullivan

Patrick Sullivan

This person does not have a biography listed with CSA.

Peter Gregory Headshot Missing
Peter Gregory

Peter Gregory

This person does not have a biography listed with CSA.

Peter McLaughlin Headshot Missing
Peter McLaughlin

Peter McLaughlin

This person does not have a biography listed with CSA.

Ralph Broom Headshot Missing
Ralph Broom

Ralph Broom

This person does not have a biography listed with CSA.

Sarabjeet Chugh Headshot Missing
Sarabjeet Chugh

Sarabjeet Chugh

This person does not have a biography listed with CSA.

Scott Giordano Headshot Missing
Scott Giordano

Scott Giordano

This person does not have a biography listed with CSA.

Scott Morrison Headshot Missing
Scott Morrison

Scott Morrison

This person does not have a biography listed with CSA.

Sergio Loureiro Headshot Missing
Sergio Loureiro

Sergio Loureiro

This person does not have a biography listed with CSA.

Sitaraman Lakshminarayanan Headshot Missing
Sitaraman Lakshminarayanan

Sitaraman Lakshminarayanan

This person does not have a biography listed with CSA.

Srijith K. Nair Headshot Missing
Srijith K. Nair

Srijith K. Nair

This person does not have a biography listed with CSA.

Tajeshwar Singh Headshot Missing
Tajeshwar Singh

Tajeshwar Singh

This person does not have a biography listed with CSA.

Tanya Forsheit
Tanya Forsheit
Co-Chair Privacy, Security & Data Innovations Group at Loeb & Loeb LLP

Tanya Forsheit

Co-Chair Privacy, Security & Data Innovations Group at Loeb & Loeb LLP

This person does not have a biography listed with CSA.

Wayne Pauley Headshot Missing
Wayne Pauley

Wayne Pauley

This person does not have a biography listed with CSA.

Werner Streitberger Headshot Missing
Werner Streitberger

Werner Streitberger

This person does not have a biography listed with CSA.

Jeff Reich
Jeff Reich
Vice President of Member Success, CSA

Jeff Reich

Vice President of Member Success, CSA

This person does not have a biography listed with CSA.

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training