Having trouble seeing this email? view it online or unsubscribe
    03.12.2015
CSA Research Update
 
 
 
 
Welcome to the CSA Research Update!
The latest on CSA Research, News & Opportunities.
 
 
 
 
 

Research at Cloud Security Alliance

CSA boasts a rapidly expanding suite of research initiatives, including 25 active work groups

 
 
CloudCISC: Cloud Cyber Incident Sharing Center

New CSA Survey Finds Financial Firms are in Search of a Cloud Strategy

The CSA released their latest survey report, "How Cloud is Being Used in the Financial Sector", administered by CSA’s Financial Services Working Group. The survey targeted executives from banking, insurance and investment firms around the world. While the survey found that cloud computing is becoming more and more prevalent throughout the financial sector, many respondents indicated having less than 50 percent of a solidified, concerted cloud strategy with controls and security being a main concern. This finding and many more can be found in the report.
read more

 
 
New CSA Member:

CSA welcomes Mobile Application Testing Firm, Gapertise
Open Peer Review:

Best Practices for Mitigating Risks in Virtualized Environments

 
 
 
 
 

Research News

The latest news about CSA research initiatives and publications.

 
 
CloudCISC: Cloud Cyber Incident Sharing Center
Cloud Industry’s First CSA STAR Attestation!

Ribose Gains Successful Third-Party Assessment Based Upon Joint CSA & AICPA Guidelines

Ribose achieved the CSA Trust and Assurance Registry (STAR) Attestation level of third-party assessment. Ribose is the first and only cloud service provider worldwide that has successfully completed a Service Organization Control 2 assessment using criteria from the American Institute of Certified Public Accountants Trust Service Principles and the CSA Cloud Controls Matrix 3.01, according to AICPA’s Attest Engagement AT Section 101.

Ronald Tse, founder of Ribose, and member of the CSA's International Standardization Council, says: "STAR Attestation provides cloud customers with an unparalleled level of assurance and verified transparency. This is the strongest cloud compliance scheme available to date – combining the depth of AICPA's SOC engagements with the comprehensive cloud security coverage of the CCM. We consider this the most powerful way to convince customers: by showing an attestation report issued by an international auditing firm, fully listing all the organization’s controls with their design and operational effectiveness described in detail, covering all criteria of TSP 100 and CCM 3.0.1."
read more

 
 
 
 
 

Education

Cloud Security Alliance seeks to educate and inform both users and providers of cloud services.

 
 
 
 
 

Events

We look forward to meeting you at one of CSA's premier events.

CSA Summit 2015

CSA Summit 2015

April 20th 9:00am – 12:00pm
RSA Conference, San Francisco

read more

CSA Legal Information
Center Seminar

CSA Legal Information
Center Seminar

Hot Legal Issues in the Cloud
April 20th – 12th, 1:15 to 5:15 pm,
San Francisco

read more

CSA Federal Summit 2015

CSA Federal Summit 2015

May 5th, Washington D.C.

read more CSA EMEA-Berlin 2015

CSA Congress EMEA

SAVE THE DATE: November 17 – 19, 2015, Berlin, Germany

CSA Congress US

CSA Congress US

CSA Congress at
Privacy. Security. Risk Conference

September 29–October 1
Las Vegas

Call for Speaker Proposals Closes March 13th
View topics and submission form
Pre-Registration Now Open! Pre-register between now and April 30th and save $200 off Early Bird rates—that’s $400 off of the regular main conference rate! Gain CSA-member pricing, use code: a15csa

Pre-Register

Register for RSA Conference

Register for RSA Conference and Save!

Planning on attending the RSA Conference? Be sure to use CSA promo codes to save a few bucks!
$100 off full conference registration, use code: 1U5CSAFCD
For a free Explorer Expo Pass, use code: X5ECLOUDSC

read more

 
 
 
 
 

Downloads

Highlights from the broad scope of CSA research documents available here.

CCM

CCM

read more
CAIQ

CAIQ

read more
Research Lifecycle

Research Lifecycle

read more
CAP Survey Report

CAP Survey Report

read more