Cloud 101CircleEventsBlog
Master CSA’s Security, Trust, Assurance, and Risk program—download the STAR Prep Kit for essential tools to enhance your assurance!

Working Group

Blockchain/Distributed Ledger

This group investigates relevant use cases, and security implications of blockchain. Currently they are creating a framework and glossary that would help provide guidance and security around: wallets, exchanges, cryptography and more.
View Current Projects
Crypto-Asset Exchange Security Guidelines
Crypto-Asset Exchange Security Guidelines

Download

Blockchain/Distributed Ledger
Working Group Overview

This group investigates relevant use cases and security implications of blockchain. Currently, they are creating a framework and glossary that would help provide guidance and security around: wallets, exchanges, cryptography, and more. We welcome anyone who would like to join, even if you would like to just listen in on your first call. 


What do we discuss? 

During these meetings, we typically discuss changes in the industry and collaborate on projects the group is currently working on.


Drafts & Important Docs

Working Group Leadership

Ashish Mehta
Ashish Mehta

Ashish Mehta

Cybersecurity - Sr. Risk Manager & Security Architect

Ashish Mehta has extensive experience in cybersecurity, blockchain, web development, IT management, financial markets, and the energy industry.

He currently serves as Co-Chair of the Blockchain Working Group and is a part of the Internet of Things (IoT) and Quantum-Safe Security Leadership Teams at the Cloud Security Alliance. In that capacity, he is responsible for pushing their multiple research efforts as well as coordinating with ...

Read more

Alexandre Castaing
Alexandre Castaing

Alexandre Castaing

Board Member, ISACA Luxembourg

Alexandre Castaing is a thought leader who promote innovation as well actionable risk practices. He gathers more than 17 years of experience in risk, audit as well as information security from a wide range of industries. He held global roles in financial services for many years and has worked mostly for large organizations including financial regulators.

Alexandre has a long track record of senior leadership engagement on strategic op...

Read more

Publications in ReviewOpen Until
Context-Based Access Control for Zero TrustNov 27, 2024
Fully Homomorphic Encryption: A Comprehensive Guide for Cybersecurity ProfessionalsDec 06, 2024
AI Organizational Responsibilities: AI Tools and ApplicationsDec 08, 2024
Zero Trust Guidance for Small and Medium Size Businesses (SMBs)Dec 15, 2024
View all
Who can join?

Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.

What is the time commitment?

The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.

Virtual Meetings

Attend our next meeting. You can just listen in to decide if this group is a good for you or you can choose to actively participate. During these calls we discuss current projects, and well as share ideas for new projects. This is a good way to meet the other members of the group. You can view all research meetings here.

Nov

22

Fri, November 22, 7:00am - 8:00am PST
Blockchain Security Governance

Nov

27

Wed, November 27, 10:00am - 11:00am PST
Blockchain Working Group - Monthly Working Meeting
See details
Agenda: 
  • CSA events & announcements 

  • Subgroup update: DLT Privacy Governance framework as an assessment tool for internal DLT Privacy audits in the Financial Sector


Join Zoom Meeting
https://zoom.us/j/202373686

Meeting ID: 202 373 686

One tap mobile
+16699009128,,202373686# US (San Jose)
+16465588656,,202373686# US (New York)

Dial by your location
        +1 669 900 9128 US (San Jose)
        +1 646 558 8656 US (New York)
Meeting ID: 202 373 686
Find your local number: https://zoom.us/u/aeuZDvhgcS

Nov

29

Fri, November 29, 7:00am - 8:00am PST
Blockchain Security Governance

Dec

6

Fri, December 6, 7:00am - 8:00am PST
Blockchain Security Governance

Dec

11

Wed, December 11, 8:00am - 9:00am PST
Blockchain Working Group
See details
Agenda: 

  • CSA events & announcements
  • Guest Presenter: Dan Doney, CTO for DTCC Digital Assets - current innovation and the future of blockchain in FI.


Join Zoom Meeting
https://zoom.us/j/202373686

Meeting ID: 202 373 686

One tap mobile
+16699009128,,202373686# US (San Jose)
+16465588656,,202373686# US (New York)

Dial by your location
        +1 669 900 9128 US (San Jose)
        +1 646 558 8656 US (New York)
Meeting ID: 202 373 686
Find your local number: https://zoom.us/u/aeuZDvhgcS

Dec

13

Fri, December 13, 7:00am - 8:00am PST
Blockchain Security Governance

Dec

20

Fri, December 20, 7:00am - 8:00am PST
Blockchain Security Governance

Dec

27

Fri, December 27, 7:00am - 8:00am PST
Blockchain Security Governance

Jan

3

Fri, January 3, 7:00am - 8:00am PST
Blockchain Security Governance

Jan

8

Wed, January 8, 10:00am - 11:00am PST
Blockchain Working Group
See details
Agenda: 
  • CSA events & announcements

  • Kick-off Blockchain/AI solution evaluation project


Join Zoom Meeting
https://zoom.us/j/202373686

Meeting ID: 202 373 686

One tap mobile
+16699009128,,202373686# US (San Jose)
+16465588656,,202373686# US (New York)

Dial by your location
        +1 669 900 9128 US (San Jose)
        +1 646 558 8656 US (New York)
Meeting ID: 202 373 686
Find your local number: https://zoom.us/u/aeuZDvhgcS

Jan

10

Fri, January 10, 7:00am - 8:00am PST
Blockchain Security Governance

Jan

17

Fri, January 17, 7:00am - 8:00am PST
Blockchain Security Governance

Open Peer Reviews

Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.

Learn how to participate in a peer review here.

Context-Based Access Control for Zero Trust

Open Until: 11/27/2024

The document "Context-Based Access Control for Zero Trust" provides guidance on implementing context-based access control (...

Fully Homomorphic Encryption: A Comprehensive Guide for Cybersecurity Professionals

Open Until: 12/06/2024

The document Fully Homomorphic Encryption: A Comprehensive Guide for Cybersecurity Professionals serves as an in-d...

AI Organizational Responsibilities: AI Tools and Applications

Open Until: 12/08/2024

The integration of LLMs and Generative AI introduces vital security considerations across development and deployment proces...

Zero Trust Guidance for Small and Medium Size Businesses (SMBs)

Open Until: 12/15/2024

In an increasingly digital world, small and medium-sized businesses (SMBs) are facing heightened security challenges, makin...