Incident Management and Forensics Working Group

Current Initiatives

No open initiatives at this time.

Introduction to the Incident Management and Forensics Working Group

The Incident Management and Forensics Working Group serves as a focal point for the examination of incident handling and forensics in cloud environments. We seek to develop best practices that consider the legal, technical, and procedural elements involved in responding in a forensically sound way to security incidents in the cloud.

Want to contribute to the Incident Management and Forensics Working Group?

Fill out the form below to join today!


Other:

If you experience trouble using this form, please submit the information here.

Incident Management and Forensics Working Group News

November 22, 2013

Cloud Security Alliance Announces Bonus Workshop Series At 2013 US Congress

The five workshops will provide participants with the opportunity to explore key topics in cloud security in an intensive daylong session led by some of the world’s most prominent cloud security practitioners.

June 27, 2013

Cloud Security Alliance Establishes Incident Management and Forensics Working Group

CSA’s newest working group releases first white paper on conducting forensic investigation in cloud environments.

January 23, 2013

CSA Seeks Input for Open Peer Review: Provider Forensic Support Whitepaper

CSA’s Telecom Working Group and Incident Management & Forensics Working Group would like to invite you to review and comment on the Provider Forensic Support in Public Multi-Tenant Cloud Environments whitepaper.

Incident Management and Forensics Working Group Videos

No videos currently available.

Incident Management and Forensics Working Group Downloads

Mapping the Forensic Standard ISO/IEC 27037 to Cloud Computing

Mapping the Forensic Standard ISO/IEC 27037 to Cloud Computing

The purpose of this document is to survey the issues related to forensic investigation in cloud environments, to describe the international standards for cloud forensics, and to summarize the current integration of cloud forensic requirements into service level agreements (SLAs).

Release Date: June 26, 2013

Incident Management and Forensics Working Group Co-chairs

Michael Panico

Stroz Friedberg

Dominik Birk

Zurich Insurance