CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
.png) | CSA Code of Conduct to EU Cloud Code of Conduct Mapping Navigating General Data Protection Regulation (GDPR) compliance requirements can be challenging. Fortunately, Codes of Conduct (CoCs) provide a straightfo... Request to download |
 | Cloud Key Management Working Group Charter 2025 Cloud services are becoming ubiquitous in all sizes, and customers encounter many obligations and opportunities for using key management systems with thos... Request to download |
 | Context-Based Access Control for Zero Trust - Japanese Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Shadow Access and AI Shadow Access is undesired or unauthorized access to resources, such as applications, networks, and data. Shadow Access is increasingly a cloud issue, res... Request to download |
 | The Six Pillars of DevSecOps Bundle DevOps enhances the management of information security, but its execution must be secured to avoid vulnerabilities like lax firewall rules or default cred... Request to download |
 | Enterprise Authority To Operate (EATO) Auditing Guidelines Now includes Auditing Guidelines!Many small and mid-sized cloud-based Anything-as-a-Service (XaaS) vendors struggle to implement robust information securi... Request to download |
 | Understanding Data Security Risk Survey Report 2025 Organizations face a rapidly changing threat landscape. The complexities of hybrid and multi-cloud environments are exposing new vulnerabilities and chall... Request to download |
 | Zero Trust Privacy Assessment and Guidance When people discuss Zero Trust, they often focus on how it can help protect data across an organization. However, they tend to forget how it can also help... Request to download |
 | Fully Homomorphic Encryption: A Comprehensive Guide for Cybersecurity Professionals - Japanese Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Zero Trust Guidance for Small and Medium Size Businesses (SMBs) - Japanese Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Cloud Security for Startups 2024 - Japanese Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Cybersecurity and the Data Lifecycle The data lifecycle refers to the comprehensive process that data undergoes, from its creation to its eventual disposal. Understanding and securing each ph... Request to download |
 | Top Threats Working Group Charter 2025 The Top Threats Working Group aims to provide up-to-date, industry-informed expert insights on cloud security risks, threats, and vulnerabilities to help ... Request to download |
 | Fully Homomorphic Encryption: A Comprehensive Guide for Cybersecurity Professionals As organizations increasingly rely on cloud computing, protecting data during processing has become a critical challenge. Traditional encryption methods p... Request to download |
 | AI Organizational Responsibilities: AI Tools and Applications This publication is the third installment in a series that explores organizational responsibilities related to Artificial Intelligence (AI). The first pap... Request to download |
 | SaaS AI-Risk for Mid-Market Organizations Survey Report Mid-market organizations are struggling to manage expanding Software as a Service (SaaS) environments. To better understand this challenge, Wing Security ... Request to download |
 | DLT Cybersecurity Governance Package Distributed Ledger Technology (DLT) brings traceability and transparency to external business workflows, while also instilling trust and efficiency in an ... Request to download |
 | Zero Trust Guidance for Critical Infrastructure - Japanese Translation In most nations, the health of public services relies on secure and resilient Critical Infrastructure. We call these infrastructures "critical" because th... Request to download |
 | Context-Based Access Control for Zero Trust Traditional access decision-making is agnostic to both Zero Trust and context. Historically, security teams based access decisions on trust. The common ac... Request to download |
 | Zero Trust Guidance for Small and Medium Size Businesses (SMBs) Cybersecurity for small businesses involves unique and heightened challenges. This makes the adoption of a Zero Trust strategy critical for safeguarding t... Request to download |