CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | Top Threats Working Group Charter 2022 The Top Threats Working Group aims to provide up-to-date, industry-informed expert insights on cloud security risks, threats, and vulnerabilities to help ... Request to download |
-01.png) | Enterprise Architecture Working Group Charter 2022 This is the 2022 Charter for the Enterprise Architecture Working Group to promote research, development, and education of best practices and methodologies... Request to download |
 | Software-Defined Perimeter (SDP) Specification v2.0 - Korean Translation 소프트웨어 정의 경계(SDP) 아키텍처는 제로 트러스트 원칙을 구현하는 효과적인 방법이다. SDP는 엔터프라이즈 보안 설계자, 네트워크 공급자 및 애플리케이션 소유자에게 동적 "소프트웨어 정의" 경계선을 구축하고, 네트워크와 리소스를 은폐하고, 네트워크 및 리소스에서 실행되는... Request to download |
 | Illustrative Type 2 SOC 2® Report: With the Additional Criteria in the Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) In the following illustrative type 2 SOC 2 report, the service auditor is reporting on: The fairness of the presentation of the service organization’s de... Request to download |
 | Auditors Guidance Document STAR Certification: Auditing the Cloud Controls Matrix The download file also contains the following: Illustrative Type 2 SOC 2® Report: With the Additional Criteria in the Cloud Security Alliance (CSA) Cloud... Request to download |
 | IoT Controls Matrix v3 - Japanese Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Guide to the IoT Controls Matrix v3 - Japanese Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Third-Party Vendor Risk Management in Healthcare The increased use of third-party vendors for applications and data processing services is a business model that is likely to continue, especially as HDOs ... Request to download |
 | CSA CCM v4.0 Addendum - CRI FS Profile v1.2 This document is a CSA CCM v4.0 addendum to the CRI FS Profile v1.2 that contains controls mapping between the CCM and the FS Profile. The document aims t... Request to download |
 | Critical Controls Implementation for Oracle Fusion Applications Framed within the context of the Cloud Security Alliance (CSA)’s ERP Twenty Controls, this document presents the essential and optional security features ... Request to download |
 | Sensitive Data in the Cloud The goal of this survey was to understand the following: Cloud use and data security needs Security priorities and challenges for the next year Approach ... Request to download |
 | State of ICS Security in the Age of Cloud The goal of this document hopes to create awareness and share insights on the benefits of leveraging Cloud Computing for ICS/OT. It also attempts to stimu... Request to download |
 | CCPA Addendum - PLA CoC v4.1 This document serves as a mapping exercise between the California Consumer Privacy Act (CCPA), the EU General Data Protection Regulation (GDPR) and the CS... Request to download |
 | CSA CCM v4.0 Addendum - UAE IA Regulation This document is an addendum to the CCM V4.0 that contain controls mapping between the CSA CCM and the UAE Information Assurance (IA) Regulation. The docu... Request to download |
 | Measuring Risk and Risk Governance Adapting to the cloud presents a new challenge to enterprises. The shared responsibility model, used to distinguish responsibilities between cloud provide... Request to download |
 | Secure Connection Requirements of Hybrid Cloud - Japanese Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | C-Level Guidance to Securing Serverless Architectures - Japanese Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | SaaS Governance Best Practices for Cloud Customers In the context of cloud security, the focus is almost always on securing Infrastructure-as-a-Service (IaaS) environments. This is despite the reality that... Request to download |
 | The Continuous Audit Metrics Catalog: Towards a Machine-Readable Representation In October 2021, the Cloud Security Alliance released the first version of the Continuous Audit Metrics catalog which provides a standard reference for th... Request to download |
 | Top Threats to Cloud Computing Pandemic Eleven The Top Threats reports have traditionally aimed to raise awareness of threats, risks, and vulnerabilities in the cloud. Such issues are often the result ... Request to download |