CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | AI Security Maturity Model (AISMM) Release Date: 05/19/2026 The objective of the CSA AI Security Maturity Model (AISMM) is to provide organizations a roadmap on building an enterprise AI security program. Although the... Request to download |
 | Release Date: 05/01/2026 AI is fundamentally changing the speed, scale, and economics of vulnerability discovery—and most security programs aren’t built to keep up. This publicati... Request to download |
 | Release Date: 04/20/2026 AI agents are rapidly becoming embedded across enterprise environments. They span cloud platforms, SaaS applications, internal systems, and LLM-driven wor... Request to download |
 | Enterprise AI Security Starts with AI Agents Release Date: 04/15/2026 This survey report explores the rise of AI agents in enterprises, as well as the reality of autonomous AI risks. Commissioned by Zenity, the report reveal... Request to download |
 | The Rise in Unstructured Data and AI Security Risks Release Date: 03/30/2026 As organizations generate increasing volumes of files, documents, communications, and logs across the cloud, they're also pushing traditional security mod... Request to download |
 | Identity and Access Gaps in the Age of Autonomous AI Release Date: 03/23/2026 Enterprises are embedding agentic AI across their environments, allowing agents to interact with applications, infrastructure, and data systems. They are ... Request to download |
 | Using Zero Trust to Secure Enterprise Information in LLM Environments Release Date: 03/02/2026 The rapid adoption of Generative AI (GenAI) is transforming organizational workflows. However, it's also escalating risks related to data privacy, intelle... Request to download |
 | Data Loss Prevention and Data Security Posture Management in Healthcare Release Date: 02/18/2026 Healthcare organizations are rapidly adopting artificial intelligence to improve patient care, operational efficiency, and research innovation. AI in heal... Request to download |
 | Release Date: 02/04/2026 Autonomous AI agents are being embedded across cloud, hybrid, and on-prem environments. However, most identity systems were built for humans, not for self... Request to download |
 | The State of Non-Human Identity and AI Security Release Date: 01/26/2026 Based on a comprehensive survey of IT and security professionals, this report explores how rapid AI adoption amplifies long-standing Identity and Access M... Request to download |
| Security Controls Catalog WG 2026 Charter Release Date: 01/26/2026 This charter establishes the mission, scope and responsibilities, goals, objectives, and operational procedures for the Security Controls Catalog (SCC) WG. ... Request to download |
.png) | The State of AI Security and Governance Release Date: 12/17/2025 Organizations are rapidly moving from AI experimentation to operational deployment, yet their abilities to secure this transformation vary widely. Commiss... Request to download |
 | Data Security within AI Environments Release Date: 12/03/2025 As organizations adopt large language models, multi-modal AI systems, and agentic AI, traditional safeguards must evolve. This publication provides a comp... Request to download |
 | Release Date: 11/19/2025 The AI Controls Matrix (AICM) provides a foundational security and governance framework for AI service providers and customers. It helps them securely imp... Request to download |
 | Capabilities-Based Risk Assessment (CBRA) for AI Systems Release Date: 11/12/2025 This publication introduces the Capabilities-Based Risk Assessment (CBRA), a structured, scalable approach to evaluating AI risk in enterprise environment... Request to download |
 | Release Date: 07/09/2025 The AI Controls Matrix (AICM) is a first-of-its-kind vendor-agnostic framework for cloud-based AI systems. Organizations can use the AICM to develop, impl... Request to download |
 | Beyond the Hype: A Benchmark Study of AI Agents in the SOC Release Date: 10/06/2025 CSA experts conducted a benchmarking study that evaluated how AI can transform alert investigations in Security Operations Centers (SOCs). Using simulated... Request to download |
 | Release Date: 08/27/2025 Machine learning (ML) is becoming increasingly central to business operations, making the security of ML pipelines essential rather than optional. Machine... Request to download |
 | Analyzing Log Data with AI Models to Meet Zero Trust Principles Release Date: 09/15/2025 Logs are fundamental to Zero Trust. They capture critical details about user activity, device behavior, network traffic, and application access. However, ... Request to download |
 | The State of Cloud and AI Security 2025 Release Date: 09/09/2025 This global survey report, developed in partnership with Tenable, examines how organizations are adapting security strategies for hybrid, multi-cloud, and... Request to download |