Research Publications
Research Insights
Best Practices for Implementing a Secure DevOps Toolchain
December 1, 2020, Randy Franklin, VP and Market GM, and William Kokolis, DevOps Practice Lead, Terazo & Bryan Jones, Solutions Architect, Cloud
Upcoming Meetings
Contribute to CSA Research
Artifact reviews allow security professionals from around the world to collaborate on CSA research. Provide your feedback on the following documents in progress.
Collaborating with CSA
Research Volunteer FAQ
Contributors to research are composed of solution providers, end users, subject matter experts, and key stakeholders in cloud and related technologies. Join the movement!
Thank You Research Contributors!
Research awards recognize individuals who demonstrate significant accomplishments and contribution to CSA research. Annual and long-term achievement awards are bestowed to those who also reflect industry leadership, community participation and passion for volunteerism.
Featured Working Groups
Artificial intelligence
As we move forward into the future of automation, AI is proving to be playing a critical role in the realm of both cyber and cloud security. The ability to learn at a rate that AI does makes it extremely important...
Blockchain
Blockchain and distributed ledger technology is an innovative and continuously evolving technology that has far reaching security implications beyond the financial services industries.
Cloud Controls Matrix
The Cloud Controls Matrix (CCM) working group supports CSA’s industry-leading meta-framework for cloud security assurance. The working group conducts controls mapping projects with the aim of identifying and analysing compliance gaps.
DevSecOps
Changing the mindset of the industry and establishing fundamental principles to enhance the development, security, and operations during project lifecycles.
Internet of Things
As the cloud environment expand to new technologies, the connected world depends on devices to manage, orchestrate, and provision data.
Software Defined Perimeter
The Software Defined Perimeter working grouped launched with the goal to develop a solution to stop network attacks against application infrastructure.