Cloud Security Alliance Releases Guidance Version 3

Third Version of Security Guidance for Critical Areas of Focus In Cloud Computing Seeks to Establish a Stable, Secure Baseline for Cloud Operations

Orlando, FL – Nov 16, 2011 – The Cloud Security Alliance (CSA) today unveiled the third version of its Security Guidance for Critical Areas of Focus in Cloud Computing. This effort provides a practical, actionable road map to managers wanting to adopt the cloud paradigm safely and securely. Key updates in Version Three include: * The domains have been rewritten to emphasize security, stability and privacy, ensuring corporate privacy in a multi-tenant environment. * The guidance assumes a structural maturity in parallel with multinational cloud standards development in both structure and content. * The extension of content included in previous versions, with practical recommendations and requirements that can be measured and audited. * The addition of Domain 14 – Security as a Service “Cloud technologies and the adoption of cloud-based computing and standards has grown tremendously in the two years since the publication of our previous version of the Guidance,” said Archie Reed, one of the three editors of the Guidance. “The thinking on cloud, the tools, and the techniques has evolved significantly, and Version 3 provides the latest best practices to meet today’s challenges while demystifying the concept of cloud services.” “Version 3 of the Guidance aims to provide a single, comprehensive, C-level, set of best practices that deliver a stable, secure baseline for cloud operations,” said Paul Simmonds, another of the editors. “It serves as a practical, actionable road map for managers, and aims to be the most technologically comprehensive document for those in the trenches of cloud adoption.” “This version of the Guidance builds upon the great work of contributors to our numerous other projects,” said Chris Rezek, the third editor. “It incorporates lessons learned from the CSA GRC Stack and Trusted Cloud Initiative, and the various CSA activities, to emphasize the needs for security, stability and privacy in the cloud.” “I want to thank each and every one of our contributors, as well as our amazing editors, for their transformational work on this version of the Guidance,” said Jim Reavis, co-founder and executive director of the CSA. “This is a significant overhaul of a huge body of work, needed to keep up with the rapidly changing landscape of cloud technologies and challenges. We are proud to continue to provide the industry’s definitive body of work for practitioners looking to leverage cloud computing as part of a secure, stable environment.” The original version of the guidance was released in April 2009, and Version 2.1 was released in January 2010.

Tweet this: @cloudsa guidanceV3; new SecAAS domain, multinational focus, keys on #security stability & privacy #cloud #csacongress http://bit.ly/ufCMug About the Cloud Security Alliance The Cloud Security Alliance is a not-for-profit organization with a mission to promote the use of best practices for providing security assurance within Cloud Computing , and to provide education on the uses of Cloud Computing to help secure all other forms of computing. The Cloud Security Alliance is led by a broad coalition of industry practitioners, corporations, associations and other key stakeholders. For further information, visit us at www.cloudsecurityalliance.org, and follow us on Twitter @cloudsa. Media Contacts: Zenobia Godschalk [email protected] 650.269.8315