CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | Release Date: 08/07/2019 In our current state of cyber security, there has been a large growth of application flaws that bypass the continuing addition of security frameworks to ensu... Request to download |
 | DevSecOps - Pillar 4 Bridging Compliance and Development Release Date: 02/08/2022 Given the rapid evolution of software development paradigms and practices, it has become a challenge to align monolithic security compliance activities wi... Request to download |
 | Best Practices for Mitigating Risks in Virtualized Environments Release Date: 05/05/2015 Request to download |
 | Improving Metrics in Cyber Resiliency Release Date: 08/30/2017 Cyber resiliency is important as it gives us “the ability to prepare and plan for, absorb, recover from, or more successfully adapt to actual or potential ad... Request to download |
![Consensus Assessment Initiative Questionnaire (CAIQ) v3.1 [No Longer Accepted]](https://cloudsecurityalliance.org/rails/active_storage/representations/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTc3MjEsInB1ciI6ImJsb2JfaWQifX0=--846e63ecb5438faa0471cb729b8fd20217573428/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJhdXRvX29yaWVudCI6dHJ1ZSwicm90YXRlIjowLCJncmF2aXR5IjoiY2VudGVyIiwiYmFja2dyb3VuZCI6Im5vbmUiLCJyZXNpemUiOiIxMTF4MTQzIn0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--93baa008e2971cd847242da268875a6f46d313a8/CAIQ-No-Longer-Accepted.png) | Consensus Assessment Initiative Questionnaire (CAIQ) v3.1 [No Longer Accepted] Release Date: 04/01/2020 Cloud Security Alliance (CSA) would like to present the next version of the Consensus Assessments Initiative Questionnaire (CAIQ) v3.1. The CAIQ offers an i... Request to download |
 | Enterprise Architecture to CCM Shared Responsibility Model Release Date: 12/18/2020 The EA-CCM Shared Responsibility Model is a companion piece with the EA-CCM Mapping. To review the EA-CCM Mapping, follow this link. (https://cloudsecuritya... Request to download |
 | Top Threats to Cloud Computing: Egregious Eleven Deep Dive - Arabic Translation Release Date: 05/27/2022 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | CSA CCM v4.0 Addendum - UAE IA Regulation Release Date: 07/05/2022 This document is an addendum to the CCM V4.0 that contain controls mapping between the CSA CCM and the UAE Information Assurance (IA) Regulation. The docu... Request to download |
 | Release Date: 07/05/2022 This document serves as a mapping exercise between the California Consumer Privacy Act (CCPA), the EU General Data Protection Regulation (GDPR) and the CS... Request to download |
 | Release Date: 07/12/2022 Anjuna commissioned CSA to develop a survey to better understand the industry’s knowledge, attitudes, and opinions regarding sensitive data in the cloud. ... Request to download |
 | Understanding Cloud Data Security and Priorities Release Date: 10/19/2022 BigID commissioned CSA to develop a survey and report to better understand the industry’s knowledge, attitudes, and opinions regarding data security in th... Request to download |
 | Agile Data Lake Threat Modeling Release Date: 03/28/2023 As cloud platforms expand further and further into business uses, the need to understand the attack surface to your data becomes much more apparent. With ... Request to download |
 | Deconstructing Application Connectivity Challenges in a Complex Cloud Environment Release Date: 12/14/2022 The production and use of SaaS applications in organizations has grown exponentially over the past several years. Application Security has become an integ... Request to download |
 | ACSP Training Course Outline | CSA Release Date: 01/17/2023 An outline of the topics covered and what you'll be building in the labs each day of the Advanced Cloud Security Practitioner (ACSP) Training. Cloud ... Request to download |
 | Release Date: 02/01/2023 A STAR Enabled Solution is a product or service that utilizes the CCM framework or the Consensus Assessment Initiative Questionnaire (CAIQ). Their technol... Request to download |
 | Release Date: 07/12/2023 The threat landscape has materially changed over the years to the point that Identity and Access Management (IAM) is a core component of any digital acces... Request to download |
 | Security Enabled Innovation and Cloud Trends Release Date: 08/02/2023 Expel commissioned CSA to develop a survey and report to understand better the industry’s knowledge, attitudes, and opinions regarding security’s relation... Request to download |
| Security Enabled Innovation Report - Redirect Release Date: 08/02/1900 Request to download |
 | STAR Attestation Value Proposition Release Date: 10/03/2023 Request to download |
 | Release Date: 01/22/2024 This CSA Data Security Glossary identifies and defines 127 terms relevant to data security. Based on the CSA Cloud Security Glossary, NIST Glossary, and o... Request to download |