Circle
Events
Blog

CSA Research Publications

Whitepapers, Reports and Other Resources

Home
Publications

Browse Publications

Privacy Level Agreement (PLA) Outline Annex
Release Date: 02/24/2013

Request to download
Privacy Level Agreement (PLA) Outline for the Sale of Cloud Services in the European Union

Privacy Level Agreement (PLA) Outline for the Sale of Cloud Services in the European Union
Release Date: 02/24/2013

The Outline provides a structure for Cloud Service Providers (CSP) to disclose, in a consistent matter, information about the privacy and data protection pol...

Request to download
The Notorious Nine: Cloud Computing Top Threats in 2013

The Notorious Nine: Cloud Computing Top Threats in 2013
Release Date: 02/24/2013

Providing organizations with up-to-date, expert-informed understanding of cloud security threats in order to make educated risk-management decisions regardin...

Request to download
What the Proposed EU Data Protection Regulation Means for Cloud Users

What the Proposed EU Data Protection Regulation Means for Cloud Users
Release Date: 02/22/2013

Request to download
Article 29 Working Party Cloud Computing Opinion: A Blow to Safe Harbor

Article 29 Working Party Cloud Computing Opinion: A Blow to Safe Harbor
Release Date: 02/22/2013

The Article 29 Data Protection Working Party—which includes representatives of the data protection authorities of each of the European Union member states—re...

Request to download
International Standardization Council Roles and Responsibilities for Liaison Officer

International Standardization Council Roles and Responsibilities for Liaison Officer
Release Date: 02/22/2013

Request to download
International Standardization Council Operating Procedures

International Standardization Council Operating Procedures
Release Date: 02/22/2013

Request to download
What Rules Apply to Government Access to Data Held by US Cloud Service Providers

What Rules Apply to Government Access to Data Held by US Cloud Service Providers
Release Date: 02/22/2013

What rules regulate government access to data held by US cloud service providers.

Request to download
Security Guidance for Critical Areas of Mobile Computing

Security Guidance for Critical Areas of Mobile Computing
Release Date: 11/08/2012

Mobile devices empower employees to do what they need to do — whenever and wherever. People can work and collaborate “in the field” with customers, partners,...

Request to download
Top Ten Big Data Security and Privacy Challenges

Top Ten Big Data Security and Privacy Challenges
Release Date: 11/07/2012

In this paper, we highlight the top ten big data specific security and privacy challenges. We interviewed Cloud Security Alliance members and surveyed securi...

Request to download
CSA Congress 2012 Big Data Overview

CSA Congress 2012 Big Data Overview
Release Date: 11/06/2012

Crystallization of best practices for security and privacy in big data.

Request to download
SecaaS Category 7 // Security Information and Event Management Implementation Guidance

SecaaS Category 7 // Security Information and Event Management Implementation Guidance
Release Date: 10/29/2012

This document provides guidance on how to evaluate, architect, and deploy cloud-based SIEM services to both enterprise and cloud-based networks, infrastructu...

Request to download
SecaaS Category 9 // BCDR Implementation Guidance

SecaaS Category 9 // BCDR Implementation Guidance
Release Date: 10/08/2012

When using the cloud for operational processes and/or production systems, an organization’s BC/DR requirements must be included in their procurement, plannin...

Request to download
SecaaS Category 8 // Encryption Implementation Guidance

SecaaS Category 8 // Encryption Implementation Guidance
Release Date: 10/08/2012

Encryption is a primary data (and application) protection technique. For encryption to be useful, encryption keys must be properly managed and protected. Thi...

Request to download
SecaaS Category 6 // Intrusion Management Implementation Guidance

SecaaS Category 6 // Intrusion Management Implementation Guidance
Release Date: 10/08/2012

Because of the limited market maturity and lack of widely accepted best practices, this document provides implementation guidelines for cloud-based intrusion...

Request to download
SecaaS Category 5 // Security Assessments Implementation Guidance

SecaaS Category 5 // Security Assessments Implementation Guidance
Release Date: 10/08/2012

There are many choices for an assessment framework standard and there is no "one size fits all" solution for security assessments. One could reasonably expec...

Request to download
SecaaS Category 4 // Email Security Implementation Guidance

SecaaS Category 4 // Email Security Implementation Guidance
Release Date: 10/08/2012

Due to its ubiquitous use, electronic mail is both the prime target of, and primary vehicle for, attacks, and must be protected on both ends: sending and rec...

Request to download
SecaaS Category 2 // Data Loss Prevention Implementation Guidance

SecaaS Category 2 // Data Loss Prevention Implementation Guidance
Release Date: 10/08/2012

DLP must be considered an essential element for achieving an effective information security strategy for protecting data as it moves to, resides in and depar...

Request to download
SecaaS Category 3 // Web Security Implementation Guidance

SecaaS Category 3 // Web Security Implementation Guidance
Release Date: 10/08/2012

The vendor and academic community have come together to form a set of solutions called Security as a Service. This document specifically addresses one elemen...

Request to download
SecaaS Category 10 // Network Security Implementation Guidance

SecaaS Category 10 // Network Security Implementation Guidance
Release Date: 10/08/2012

In a cloud environment, a major part of network security is likely to be provided by virtual security devices and services, alongside traditional physical ne...

Request to download