CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | Telehealth Risk Management The recent COVID-19 pandemic has increased the demand for data and accelerated the use of telehealth. The Health Resources and Services Administration (HRSA)... Request to download |
 | Cloud Controls Matrix and CAIQ v4 The Cloud Controls Matrix (CCM) is a cybersecurity control framework for cloud computing aligned to the CSA best practices, that is considered the de-facto s... Request to download |
-Framework.png) | Cloud Incident Response Framework - Japanese Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | IoT Security Controls Framework Version 2 - Japanese Translation The IoT Security Controls Framework is relevant for enterprise IoT systems that incorporate multiple types of connected devices, cloud services, and networki... Request to download |
 | CSA Guide to the IoT Security Controls Framework v2 - Japanese Translation The Guide to the IoT Security Controls Framework provides instructions for using the companion CSA IoT Security Controls Framework spreadsheet. This guide ex... Request to download |
 | Cloud Solution Data Science COVID-19 Dashboard Data centers grow annually by about forty percent, and those for industries such as healthcare, energy, and transportation are growing even faster. Howeve... Request to download |
 | CSA Enterprise Architecture Reference Guide The Enterprise Architecture Reference Guide v2 is a companion piece with the EA v2 to CCM v3.0.1 Mapping. The peer review for both documents are intended to ... Request to download |
 | Enterprise Architecture Reference Diagram The CSA Enterprise Architecture (EA) is both a methodology and a set of tools. It is a framework, a comprehensive approach for the architecture of a secure c... Request to download |
 | Enterprise Architecture v2 to CCM v3.01 Mapping Guide The Enterprise Architecture (EA) is the CSA’s standard cloud reference architecture while the Cloud Control Matrix (CCM) is the CSA’s standard control set. T... Request to download |
 | Enterprise Architecture to CCM v3.01 Reordered Mapping The EA v2 to CCM v3.0.1 Mapping is a companion piece with the Enterprise Architecture Reference Guide v2. The peer review for both documents are intended to ... Request to download |
 | Disaster Recovery as a Service This document aims to increase awareness of backup and disaster recovery services. We discuss DRaaS architectures, services, and security best practices. Request to download |
 | Top Cloud Priorities for CxOs The Top Cloud Priorities for CxOs was created to equip C-level executives with industry guidance to build pragmatic cloud security projects and strategies... Request to download |
 | CSA CxO Trust Working Group Charter The CSA CxO Trust Working Group will conduct research consisting of best practices, metrics, surveys, C-level presentations, and other tools in support of... Request to download |
 | STAR Enabled Solution | CAIQ-Lite CSA and Whistic identified the need for a lighter-weight assessment questionnaire in order to accommodate the shift to cloud procurement models, and to enabl... Request to download |
 | Cloud Incident Response Framework This document aims to provide a Cloud Incident Response (CIR) framework that serves as a go-to guide for a CSC to effectively prepare for and manage cloud in... Request to download |
 | Security Guidelines for Providing and Consuming APIs In modern application workloads, organizations are often required to integrate their application with other parties such as Software-as-a-Service (SaaS) prov... Request to download |
 | Crypto-Asset Exchange Security Guidelines Thanks to the blockchain technology that makes them possible, crypto-assets are becoming massively successful. As with any successful industry, a multitud... Request to download |
 | Critical Controls Implementation for Oracle E-Business Suite This paper will help an organization determine what security changes are needed when deploying Oracle E-Business Suite (EBS) in the Cloud. For clarity, this ... Request to download |
 | Cloud Penetration Testing Playbook: Korean Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Software Defined Perimeter Architecture Guide: Korean Translation This localized version of this publication was produced from the original source (link to original) material through the efforts of chapters and volunteer... Request to download |