Working Group
SaaS Governance
This group aims to benefit all parties in the Software-as-a-Service (SaaS) ecosystem by supporting a common understanding of SaaS related risks from the perspectives of the cloud customer and cloud service provider.
Working Group Leadership
Ronald Tse
CEO, Ribose
Ronald has served CSA in numerous capacities, including as a member of CSA's APAC Research Advisory and International Standardization Council. Additionally, he co-chairs the Open Certification Framework (OCF), SaaS Governance, and DevSecOps working groups. He is the founder and CEO of Ribose, where under his leadership the company has been consistently awarded the industry's highest cloud security ratings, including being the on...
| Publications in Review | Open Until |
|---|---|
| Software-Defined Perimeter: Architecture Guide V3 | Dec 05, 2025 |
| Zero Trust Guidance for Building a Resilient Enterprise Environment | Dec 05, 2025 |
| Standards-Benchmarks-Maturity | Dec 13, 2025 |
| Open Source Red Teaming Tool: PyRIT Automation Capability in Agentic Red Team Testing Environments | Dec 13, 2025 |
Who can join?
Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.
What is the time commitment?
The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.
Virtual Meetings
Attend our next meeting. You can just listen in to decide if this group is a good for you or you can choose to actively participate. During these calls we discuss current projects, and well as share ideas for new projects. This is a good way to meet the other members of the group. You can view all research meetings here.
Open Peer Reviews
Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.