Cloud 101
Circle
Events
Blog

Working Group

Cloud Component Specifications

In order to address the gap in industry best practices for cloud components this working group proposes to develop internationally recognized technical security specifications for cloud components.
Cloud OS Security Specification v2.0
Cloud OS Security Specification v2.0

Download

Cloud Component Specifications
Working Group Overview

In order to address the gap in industry best practices for cloud components, this working group proposes to develop internationally recognized technical security specifications for cloud components.


Drafts & Important Docs


Working Group Leadership

Xiaoyu Ge
Xiaoyu Ge

Xiaoyu Ge

Senior Security Standards Manager of Huawei IT

Xiaoyu Ge is the Senior Security Standards Manager of Huawei IT Product Line which include cloud computing, big data, storage, and server products and services. He is also active as security expert in SDOs, He is the ISO/IEC JTC1 SC27 WG expert of China Nation Body, he is the rapporteur of several SC27 project such as “Requirements for establishing roots of trust for virtualized environment”. He participated in CSA several years ago, he is ...

Read more

Publications in ReviewOpen Until
Telesurgery Tabletop Guide BookDec 16, 2022
Security Guidance for Critical Areas of Focus in Cloud Computing v5 - Section 2: Organization ManagementDec 18, 2022
ATT&CK & D3FEND with a CAVEATJan 14, 2023
Security Guidance for Critical Areas of Focus in Cloud Computing v5 - OutlineMar 31, 2023
View all
Who can join?

Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.

What is the time commitment?

The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.

Open Peer Reviews

Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.

Learn how to participate in a peer review here.

Telesurgery Tabletop Guide Book

Open Until: 12/16/2022

The purpose of this guidebook is to assist healthcare providers in planning and facilitating a discussion and evaluation of...

Security Guidance for Critical Areas of Focus in Cloud Computing v5 - Section 2: Organization Management

Open Until: 12/18/2022

With the growing amount of cloud applications that customers are using, it is as important as ever to get a handle on the m...

ATT&CK & D3FEND with a CAVEAT

Open Until: 01/14/2023

Cybersecurity practitioners continue to search for adversarial threat models to drive system assessment and operational ana...

Security Guidance for Critical Areas of Focus in Cloud Computing v5 - Outline

Open Until: 03/31/2023

The proposed outline for the Cloud Security Alliance Security Guidance for Critical Areas of Focus in Cloud Computing v5 is...