CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | Measuring Risk and Risk Governance The goal of this research project is to assess the maturity of public cloud and risk management within the enterprise. The key areas of interest include… ... Request to download |
 | Secure Connection Requirements of Hybrid Cloud - Japanese Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | C-Level Guidance to Securing Serverless Architectures - Japanese Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | SaaS Governance Best Practices for Cloud Customers In the context of cloud security, the focus is almost always on securing Infrastructure-as-a-Service (IaaS) environments. This is despite the reality that... Request to download |
 | The Continuous Audit Metrics Catalog: Towards a Machine-Readable Representation In October 2021, the Cloud Security Alliance released the first version of the Continuous Audit Metrics catalog which provides a standard reference for th... Request to download |
 | Top Threats to Cloud Computing Pandemic Eleven The Top Threats reports have traditionally aimed to raise awareness of threats, risks, and vulnerabilities in the cloud. Such issues are often the result ... Request to download |
 | CISO Perspectives and Progress in Deploying Zero Trust Some of the areas covered in this survey include where Zero Trust falls as a priority in the organization, the percentage of those who have completed rela... Request to download |
 | Top Threats to Cloud Computing: Egregious Eleven Deep Dive - Arabic Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Best Practices for Smart Contract Security Hyperledger Fabric The goal is to establish best practices for using smart contract specifically in Hyperledger Fabric 2.0 environment. This document serves as a guide for S... Request to download |
 | Serverless Computing Working Group Charter Serverless working group charter document. The Serverless WG seeks to develop best practices to help organizations that want to run their business with a... Request to download |
 | HPC Cloud Services Onboarding Guide This paper aims to present an overview of what to consider to ensure the proper selection, design, and implementation of an HPC solution that will satisfy... Request to download |
 | Healthcare Supply Chain Cybersecurity Risk Management It is essential for Healthcare Delivery Organizations to conduct proper risk management practices and risk assessments of suppliers and third-party servic... Request to download |
 | Cloud Key Management Working Group Charter Cloud services are becoming ubiquitous in all sizes, and customers encounter many obligations and opportunities for using key management systems with thos... Request to download |
 | Software-Defined Perimeter (SDP) Specification v2.0 - Japanese Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | IoT Controls Matrix v3 The IoT Security Controls Matrix is relevant for enterprise IoT systems that incorporate multiple types of connected devices, cloud services, and networki... Request to download |
 | Guide to the IoT Controls Matrix v3 The Guide to the IoT Security Controls Matrix provides instructions for using the companion CSA IoT Security Controls Matrix v3. This guide explains how t... Request to download |
 | Identity Access Management Working Group Charter Cloud services are becoming ubiquitous in all sizes, and customers encounter many obligations and opportunities for using Identity Access Management (IAM)... Request to download |
 | Health Information Management Working Group Charter The Health Information Management Working Group aims to directly influence how health information service providers deliver secure cloud solutions (servic... Request to download |
 | Getting Quantum Safe in 5 Slides This is a set of 5 high-level slides about how to approach quantum-safe security. The goal is briefly to outline the problem, possible solutions, next ste... Request to download |
 | C-Level Guidance to Securing Serverless Architectures The purpose of this document is to provide a high-level business overview of Serverless architectures, along with the risks and the security concerns when... Request to download |