CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | Best Practices for Implementing a Secure Application Container Architecture Release Date: 07/26/2019 Application containers and a microservices architecture are being used to design, develop and deploy applications leveraging agile software development appro... Request to download |
 | Release Date: 07/25/2019 New Services and Tools for Cyber-Crime. The H2020 EU funded project, Takedown, in which CSA participated along with 18 other partners-organisations, deliver... Request to download |
 | Challenges in Securing Application Containers and Microservices Release Date: 07/16/2019 Application containers and a microservices architecture are being used to design, develop and deploy applications leveraging agile software development appro... Request to download |
 | Cloud Penetration Testing Playbook Release Date: 07/12/2019 As cloud services continue to enable new technologies and see massive adoption there is a need to extend the scope of penetration testing into public cloud s... Request to download |
 | Software Defined Perimeter (SDP): Awareness and Adoption Infographic Release Date: 07/01/2019 A majority of organizations recognize the need to change their approach to user access control. SDP is seeing early market adoption and awareness, with under... Request to download |
 | Release Date: 06/24/2019 In this document CSA provides an approach to assess risk in SaaS cloud computing. It takes into account the security challenges in a cloud computing environm... Request to download |
 | Mitigating the Quantum Threat with Hybrid Cryptography Release Date: 06/17/2019 Focus of this document is on four hybrid cryptographic schemes which provide both classical security of classical crypto and the quantum security of a quantu... Request to download |
 | Top 20 Critical Controls for Cloud ERP Customers Release Date: 06/10/2019 This document aims to be a guide for assessing and prioritizing the most critical controls that organizations should take into account when trying to secure ... Request to download |
| Cloud Penetration Testing Guidance Release Date: 06/07/2019 This document aims to be a guide for conducting penetration testing on cloud services. The document outlines important aspects such as the scoping of cloud p... Request to download |
 | Cloud Security Alliance Code of Conduct for GDPR Compliance (Updated - September 2020) Release Date: 06/03/2019 The CSA Code of Conduct is designed to offer both a compliance tool for GDPR compliance and transparency guidelines regarding the level of data protection o... Request to download |
 | Preparing Enterprises for the Quantum Computing Cybersecurity Threats Release Date: 05/23/2019 Quantum computing, while expected to help make many advancements, will also break the existing asymmetric-key cryptosystems, thus endangering our security in... Request to download |
 | Release Date: 05/21/2019 CSA’s latest survey examines information security concerns in complex cloud environment. The survey of 700 IT and security professionals aims to analyze and ... Request to download |
 | Cloud OS Security Specification Release Date: 05/07/2019 This document builds on the foundation provided by ISO/IEC 17788, ISO/IEC 19941, ISO/IEC 27000, NIST SP 500-299, and NIST SP 800-144 in the context of cloud ... Request to download |
 | Release Date: 05/07/2019 Software Defined Perimeter (SDP) Architecture Guide is designed to leverage proven, standards-based components to stop network attacks against application in... Request to download |
| Hybrid Cloud Security Services Charter Release Date: 04/25/2019 This initiative aims to develop a security white paper specifying hybrid cloud security risks and countermeasures, helping users identify and reduce the risk... Request to download |
| Release Date: 04/09/2019 The Cloud Key Management Working Group will facilitate the standards for seamless integration between CSPs and Key Broker vendor platforms. It will ensure th... Request to download |
| Release Date: 04/09/2019 In order to improve understanding, perception, and thus reputation, Security as a Service requires a clear definition and direction to ensure it is understoo... Request to download |
 | Release Date: 03/05/2019 Lessons from the Cloud - David Cass, Chief Information Security Officer Cloud and SaaS Operations & Global Partner Cloud Security Services, IBM ... Request to download |
 | CSA IoT Security Controls Framework Release Date: 03/05/2019 The Internet of Things (IoT) Security Controls Framework introduces the base-level security controls required to mitigate many of the risks associated with a... Request to download |
 | CSA Guide to the IoT Security Controls Framework Release Date: 03/05/2019 The Guide to the IoT Security Controls Framework provides instructions for using the companion CSA IoT Security Controls Framework spreadsheet. This guide ex... Request to download |