Cloud Component Specifications
In order to address the gap in industry best practices for cloud components this working group proposes to develop internationally recognized technical security specifications for cloud components.
Working Group Leadership
Senior Security Standards Manager of Huawei IT
Xiaoyu Ge is the Senior Security Standards Manager of Huawei IT Product Line which include cloud computing, big data, storage, and server products and services. He is also active as security expert in SDOs, He is the ISO/IEC JTC1 SC27 WG expert of China Nation Body, he is the rapporteur of several SC27 project such as “Requirements for establishing roots of trust for virtualized environment”. He participated in CSA several years ago, he is ...
|Publications in Review||Open Until|
|Telesurgery Tabletop Guide Book||Dec 16, 2022|
|Security Guidance for Critical Areas of Focus in Cloud Computing v5 - Section 2: Organization Management||Dec 18, 2022|
|ATT&CK & D3FEND with a CAVEAT||Jan 14, 2023|
|Security Guidance for Critical Areas of Focus in Cloud Computing v5 - Outline||Mar 31, 2023|
Who can join?
Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.
What is the time commitment?
The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.
Open Peer Reviews
Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.
Telesurgery Tabletop Guide Book
Open Until: 12/16/2022
The purpose of this guidebook is to assist healthcare providers in planning and facilitating a discussion and evaluation of...
Security Guidance for Critical Areas of Focus in Cloud Computing v5 - Section 2: Organization Management
Open Until: 12/18/2022
With the growing amount of cloud applications that customers are using, it is as important as ever to get a handle on the m...
ATT&CK & D3FEND with a CAVEAT
Open Until: 01/14/2023
Cybersecurity practitioners continue to search for adversarial threat models to drive system assessment and operational ana...
Security Guidance for Critical Areas of Focus in Cloud Computing v5 - Outline
Open Until: 03/31/2023
The proposed outline for the Cloud Security Alliance Security Guidance for Critical Areas of Focus in Cloud Computing v5 is...