CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | OCF Vision Statement The CSA Open Certification Framework is a program for flexible, incremental and multi-layered cloud provider certification according to the Cloud Security Al... Request to download |
 | Innovation Initiative Overview Powerpoint |
 | Innovation Initiative Charter |
 | Cloud Consumer Advocacy Questionnaire The purpose of this survey was to capture the current state of data governance and data security capabilities offered by leading cloud service providers in t... Request to download |
 | CSA Security Guidance Domain 3: Legal Issues: Contracts and Electronic Discovery This domain highlights some of the legal aspects raised by cloud computing. It provides general background on legal issues that can be raised by moving data ... Request to download |
 | Security Guidance for Critical Areas of Focus in Cloud Computing V3.0 The CSA guidance as it enters its third edition seeks to establish a stable, secure baseline for cloud operations. This effort provides a practical, actionab... Request to download |
 | Enterprise Architecture Mapping V1.9 This is an outdated version of this document. You can access the latest version of the CSA Enterprise Architecture here. Request to download |
 | Enterprise Architecture Model V1.1 This is an outdated version of this document. You can access the latest version of the CSA Enterprise Architecture here. ... Request to download |
 | Defined Categories of Service 2011 |
 | GRC Stack Courseware |
 | Enterprise Architecture Reference Architecture Quick Guide This quick guide provides an overview of what the Enterprise Architecture is, the challenges it helps solve and how to use it. The Enterprise Architecture it... Request to download |
 | Consensus Assessments Initiative Questionnaire v1.1 There is a new version of CAIQ available. The latest version has been combined with the Cloud Controls Matrix. Questionnaire is organized using CSA 13 gover... Request to download |
 | CloudTrust Protocol Information Overview Powerpoint The CloudTrust Protocol (CTP) offers an uncomplicated, natural way to request and receive fundamental information about essential elements of transparency. ... Request to download |
 | Cloud Controls Matrix v1.2 This is an old version of the Cloud Controls Matrix (CCM). You learn more and download the latest version of the CCM here: https://cloudsecurityalliance.org/... Request to download |
 | CCAQIS v1.2 The purpose of this survey is to capture the current state of data governance and data security capabilities offered by leading cloud service providers in th... Request to download |
| CSA V3 Guideline: Book Excerpts Culture‐free, one‐size‐fits‐all English is usually the most efficient way to speak to a large, heterogeneous audience of E2s. In contrast, there are times wh... Request to download |
 | CloudTrust Protocol Information Overview The CloudTrust Protocol (CTP) offers an uncomplicated, natural way to request and receive fundamental information about essential elements of transparency. ... Request to download |
 | GRC Stack Training Document |
| Cloud Computing for Business This book is for all these people, and indeed for all executives whose companies are using, or thinking of using, cloud computing. Request to download |
 | CloudCERT Report to CSA Summit 2011 Enhance the capability of the cloud community to prepare for and respond to vulnerabilities, threats, and incidents in order to preserve trust in cloud compu... Request to download |