CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | Cloud Security Alliance Code of Conduct for GDPR Compliance (Updated - September 2020) Release Date: 06/03/2019 The CSA Code of Conduct is designed to offer both a compliance tool for GDPR compliance and transparency guidelines regarding the level of data protection o... Request to download |
 | Preparing Enterprises for the Quantum Computing Cybersecurity Threats Release Date: 05/23/2019 Quantum computing, while expected to help make many advancements, will also break the existing asymmetric-key cryptosystems, thus endangering our security in... Request to download |
 | Release Date: 05/21/2019 CSA’s latest survey examines information security concerns in complex cloud environment. The survey of 700 IT and security professionals aims to analyze and ... Request to download |
 | Cloud OS Security Specification Release Date: 05/07/2019 This document builds on the foundation provided by ISO/IEC 17788, ISO/IEC 19941, ISO/IEC 27000, NIST SP 500-299, and NIST SP 800-144 in the context of cloud ... Request to download |
 | Release Date: 05/07/2019 Software Defined Perimeter (SDP) Architecture Guide is designed to leverage proven, standards-based components to stop network attacks against application in... Request to download |
 | Hybrid Cloud Security Services Charter Release Date: 04/25/2019 This initiative aims to develop a security white paper specifying hybrid cloud security risks and countermeasures, helping users identify and reduce the risk... Request to download |
| Release Date: 04/09/2019 The Cloud Key Management Working Group will facilitate the standards for seamless integration between CSPs and Key Broker vendor platforms. It will ensure th... Request to download |
| Release Date: 04/09/2019 In order to improve understanding, perception, and thus reputation, Security as a Service requires a clear definition and direction to ensure it is understoo... Request to download |
 | Release Date: 03/05/2019 Lessons from the Cloud - David Cass, Chief Information Security Officer Cloud and SaaS Operations & Global Partner Cloud Security Services, IBM ... Request to download |
 | CSA IoT Security Controls Framework Release Date: 03/05/2019 The Internet of Things (IoT) Security Controls Framework introduces the base-level security controls required to mitigate many of the risks associated with a... Request to download |
 | CSA Guide to the IoT Security Controls Framework Release Date: 03/05/2019 The Guide to the IoT Security Controls Framework provides instructions for using the companion CSA IoT Security Controls Framework spreadsheet. This guide ex... Request to download |
 | STAR Continuous Technical Guidance Release Date: 02/27/2019 STAR Continuous specifies the necessary activities and conditions for the continuous auditing of the cloud service over a defined set of security requirement... Request to download |
| High Performance Computing (HPC) Cloud Security Working Group Charter Release Date: 02/26/2019 To develop a holistic security framework for cloud infrastructure architected for High Performance Computing needs, with the aim of securing where the cloud ... Request to download |
| CCM Mapping Workpackage Template Release Date: 02/14/2019 This document is the companion document to the Methodology for the Mapping of the Cloud Controls Matrix (CCM). It is a CCM mapping workpackage template that ... Request to download |
 | The 12 Most Critical Risks for Serverless Applications Release Date: 02/11/2019 The 12 Most Critical Risks for Serverless Applications 2019 document is meant to serve as a security awareness and education guide. This report was curated a... Request to download |
| Cloud Incident Response Charter Release Date: 01/21/2019 To develop a holistic Cloud Incident Response (CIR) framework that comprehensively covers key causes of cloud outages (both security and non-security related... Request to download |
| CCM v3.0.1 Addendum - BSI Germany C5 v1 Release Date: 01/18/2019 This document is an addendum to the Cloud Controls Matrix (CCM) V3.0.1 controls. It contains the additional controls that serves to bridge the gap between CC... Request to download |
| CCM v3.0.1 Addendum - ISO 27002 27017 27018 v1.1 Release Date: 01/18/2019 This document is an addendum to the Cloud Controls Matrix (CCM) V3.0.1 controls. It contains the additional controls that serves to bridge the gap between CC... Request to download |
 | Enterprise Resource Planning and Cloud Adoption Release Date: 01/11/2019 The “Impact of Cloud on ERP” survey report was designed to assess the impact of ERP solutions on organizations and better understand cloud preparation and da... Request to download |
 | Guideline on Effectively Managing Security Service in the Cloud Release Date: 01/04/2019 This initiative aims to develop a research whitepaper, focusing on building up a cloud security services management platform. This whitepaper will serve as a... Request to download |