CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | The State of Cloud and AI for Financial Services 2026 Release Date: 06/08/2026 This survey report examines how financial institutions are rapidly moving beyond cloud adoption and AI experimentation. Commissioned by Anjuna, the report... Request to download |
 | 2026 State of Modern Application & AI Security Release Date: 06/01/2026 Production environments remain the decisive layer where exposure turns into operational risk. Built on survey data from more than 900 cybersecurity leader... Request to download |
 | Release Date: 04/20/2026 AI agents are rapidly becoming embedded across enterprise environments. They span cloud platforms, SaaS applications, internal systems, and LLM-driven wor... Request to download |
 | Security Controls Catalog WG 2026 Charter Release Date: 01/26/2026 This charter establishes the mission, scope and responsibilities, goals, objectives, and operational procedures for the Security Controls Catalog (SCC) WG. ... Request to download |
 | Managing Privileged Access in a Cloud-First World Release Date: 11/24/2025 Organizations are shifting to cloud-first architectures, distributed workforces, and identity-centric security models. This means that Privileged Access M... Request to download |
 | Cyber Resiliency in Financial Services Survey Report Release Date: 07/16/2025 Data resiliency and operational security have become increasingly critical as digital transformation accelerates. The financial industry faces distinct ch... Request to download |
 | CAVEaT Working Group Charter 2025 Release Date: 06/26/2025 The Cloud Security Alliance (CSA), in collaboration with the MITRE Corporation, established the Cloud Adversarial Vectors, Exploits, and Threats (CAVEaT™)... Request to download |
 | Zero Trust Automation & Orchestration and Visibility & Analytics Overview Release Date: 06/04/2025 Visibility & Analytics and Automation & Orchestration are foundational, cross-cutting capabilities within the Zero Trust paradigm. They enable con... Request to download |
 | Release Date: 05/27/2025 Traditional security models treat Internet of Things (IoT) security solely as a long-term supply chain concern. This is a significant oversight in today's... Request to download |
 | Top Threats to Cloud Computing - Deep Dive 2025 Release Date: 04/28/2025 This report uses the threats identified in CSA’s Top Threats to Cloud Computing 2024 to reflect on eight recent cybersecurity breaches. Notable incidents ... Request to download |
 | State of SaaS Security Report 2025 Release Date: 04/21/2025 Software-as-a-Service (SaaS) applications have become foundational to modern business operations. However, organizations are also facing a rising tide of ... Request to download |
.png) | CSA Code of Conduct to EU Cloud Code of Conduct Mapping Release Date: 03/24/2025 Navigating General Data Protection Regulation (GDPR) compliance requirements can be challenging. Fortunately, Codes of Conduct (CoCs) provide a straightfo... Request to download |
 | Cloud Key Management Working Group Charter 2025 Release Date: 03/18/2025 Cloud services are becoming ubiquitous in all sizes, and customers encounter many obligations and opportunities for using key management systems with thos... Request to download |
 | Enterprise Authority To Operate (EATO) Auditing Guidelines Release Date: 03/05/2025 Now includes Auditing Guidelines!Many small and mid-sized cloud-based Anything-as-a-Service (XaaS) vendors struggle to implement robust information securi... Request to download |
 | Zero Trust Privacy Assessment and Guidance Release Date: 02/18/2025 When people discuss Zero Trust, they often focus on how it can help protect data across an organization. However, they tend to forget how it can also help... Request to download |
 | Cybersecurity and the Data Lifecycle Release Date: 02/10/2025 The data lifecycle refers to the comprehensive process that data undergoes, from its creation to its eventual disposal. Understanding and securing each ph... Request to download |
 | Top Threats Working Group Charter 2025 Release Date: 02/04/2025 The Top Threats Working Group aims to provide up-to-date, industry-informed expert insights on cloud security risks, threats, and vulnerabilities to help ... Request to download |
 | Fully Homomorphic Encryption: A Comprehensive Guide for Cybersecurity Professionals Release Date: 02/03/2025 As organizations increasingly rely on cloud computing, protecting data during processing has become a critical challenge. Traditional encryption methods p... Request to download |
| DLT Cybersecurity Governance Framework Release Date: 01/27/2025 This is a peer review for a group of documents that includes a tool, report, and user guide. This peer review is specifically for the DLT Cybersecurity Go... Request to download |
| DLT Cybersecurity Governance Framework Report Release Date: 01/27/2025 This is a peer review for a group of documents that includes a tool, report, and user guide. This peer review is specifically for the DLT Cybersecurity Go... Request to download |