CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | Key Management for Public Cloud Migration Release Date: 12/17/2024 More and more organizations are adopting public cloud technologies. This leads to a mass data migration where existing applications that are on-premises o... Request to download |
 | Top Threats to Cloud Computing 2024 - Japanese Translation Release Date: 12/12/2024 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Cyber Resiliency in the Financial Industry 2024 Survey Report Release Date: 12/09/2024 Data resiliency and operational security have become increasingly critical as digital transformation accelerates. The financial industry faces distinct ch... Request to download |
 | Map the Transaction Flows for Zero Trust Release Date: 11/18/2024 The NSTAC Report to the President on Zero Trust defines five steps to implementing a Zero Trust security strategy. This publication provides guidance on e... Request to download |
.png) | CCM Video Series: IPY - Interoperability & Portability Release Date: 11/18/2024 In this presentation we explore the Interoperability and Portability (IPY) domain of the Cloud Control Matrix (CCM), which comprises four control specific... Request to download |
 | AI Risk Management: Thinking Beyond Regulatory Boundaries Release Date: 11/13/2024 While artificial intelligence (AI) offers tremendous benefits, it also introduces significant risks and challenges that remain unaddressed. A comprehensiv... Request to download |
 | Top Concerns With Vulnerability Data Release Date: 11/11/2024 The top vulnerability management frameworks used today include the Common Vulnerabilities and Exposures (CVE) program and the Common Vulnerability Scoring... Request to download |
.png) | CCM Video Series: A&A - Audit & Assurance Release Date: 11/11/2024 In this presentation we introduce the Audit and Assurance (A&A) domain within the Cloud Control Matrix (CCM). The A&A domain, consisting of six co... Request to download |
.png) | CCM Video Series: AIS - Application & Interface Security Release Date: 11/10/2024 In this presentation, we introduce the CCM's Application and Interface Security (AIS) domain. With seven control specifications, the AIS domain is focused... Request to download |
 | Using Asymmetric Cryptography to Help Achieve Zero Trust Objectives Release Date: 11/05/2024 This publication explores the use of asymmetric cryptography in Zero Trust. Asymmetric cryptography provides an industry-standard, secure method to establ... Request to download |
.png) | CCM Video Series: HRS - Human Resources Security Release Date: 11/04/2024 In this presentation we focus on the Human Resources (HRS) security domain, which comprises thirteen control specifications designed to help cloud organiz... Request to download |
.png) | CCM Video Series: GRC - Governance, Risk Management, & Compliance Release Date: 11/04/2024 In this presentation we introduce the*Governance, Risk Management, and Compliance (GRC) domain of CCM, which consists of eight control specifications. The... Request to download |
.png) | CCM Video Series: CCC - Change Control & Configuration Management Release Date: 11/02/2024 This presentation explores the Change Control and Configuration Management (CCCM) domain of the Cloud Control Matrix (CCM). With its nine control specific... Request to download |
.png) | CCM Video Series: CEK - Cryptography, Encryption, & Key Management Release Date: 11/02/2024 In this presentation we explore the Cryptography, Encryption, and Key Management (CEK) domain within the Cloud Control Matrix (CCM) that comprises twenty-... Request to download |
.png) | CCM Video Series: LOG - Logging & Monitoring Release Date: 11/02/2024 In this presentation we focus on the Logging and Monitoring domain, which includes thirteen control specifications that help both Cloud Service Providers ... Request to download |
.png) | CCM Video Series: STA - Supply Chain Mgmt, Transparency, & Accountability Release Date: 11/02/2024 In this presentation we explore the Supply Chain Management, Transparency, and Accountability (STA) domain, which includes fourteen control specifications... Request to download |
.png) | CCM Video Series: TVM - Threat & Vulnerability Management Release Date: 11/02/2024 In this presentation we cover the Threat and Vulnerability Management (TVM) domain, which features ten control specifications aimed at helping both Cloud ... Request to download |
.png) | CCM Video Series: BCR - Business Continuity Mgmt & Op Resilience Release Date: 11/02/2024 In this presentation, we introduce the CCM business Continuity Management and Operational Resilience domain, comprising eleven control specifications. Thi... Request to download |
.png) | CCM Video Series: DSP - Data Security & Privacy Release Date: 11/02/2024 In this presentation we explore the Data Security and Privacy Lifecycle Management (DSP) domain, which includes nineteen control specifications focused on... Request to download |
.png) | CCM Video Series: IAM - Identity & Access Management Release Date: 11/02/2024 In this presentation we introduce the Identity and Access Management (IAM) domain, which includes sixteen control specifications aimed at helping both Clo... Request to download |