CSA Research

Best practices, guidance, frameworks and tools to help the industry secure the cloud. Read our research to get your questions around cloud security answered.

View Working Groups

Research Home

Research

CSA Research is created by the industry for the industry and is both vendor-neutral and consensus driven. Our research is created by subject matter experts who volunteer for our working groups. Each working group focuses on a unique topic or aspect of cloud security, from IoT, DevSecOps, Serverless and more, we have working groups for over 20 areas of cloud computing. You can view a list of all active research working groups. To find out more about how our research is created and the process we follow you can view the CSA Research Lifecycle.

Want to learn how to stay secure in the cloud?

Read CSA’s recommendations

Contribute to CSA Research

Peer reviews allow security professionals from around the world to collaborate on CSA research. Provide your feedback on the following documents in progress.

Publications in Review

Open Until

The Six Pillars of MCP

Oct 28, 2026

AARM Benchmarking Framework

Oct 30, 2026

Securing Operational Technology in the Cloud with Zero Trust -Drivers and Tradeoffs for Critical Infrastructure Cloud Deployments

Oct 30, 2026

Authorization of Agents

Nov 13, 2026

View all

Latest Research

The State of Data Privacy Engineering

Release Date: 10/21/2026

Organizations are collecting and processing growing volumes of personal data. This presents increasing challenges related to data security, responsible data use, regulatory compliance, and emerging technologies. Privacy by design, a core principle of data privacy engineering (DPE), helps...

Download Now

DLP in the AI Era

Release Date: 10/09/2026

Data loss prevention (DLP) is widely deployed, but many programs struggle to stop sensitive data from leaving the organization. Generative AI (GenAI) tools, cloud storage, and unmanaged devices are exposing coverage gaps, while false positives and business pressure limit effective enforcement.

...

Download Now

Frontier Ready Assessment Framework

Release Date: 10/08/2026

AI-enabled adversaries are compressing exploit timelines, multiplying attack capacity, and putting expert-grade capabilities within reach of lower-skilled attackers. Preparing for these threats requires security program transformation: applying security fundamentals consistently, at machine...

Download Now

View All Research