Working Group
Regulatory Analysis and Compliance Engineering
Developing machine-readable mappings, automation tools, and methodologies to align cybersecurity controls with evolving regulations.
- Develops best practices for regulatory mapping and compliance gap analysis.
- Creates machine-readable formats for regulatory frameworks.
- Establishes methodologies for analyzing and mapping regulatory requirements to control objectives.
- Defines logical rules for regulatory interpretation and cross-framework mapping.
- Identifies relationships between regulatory controls (e.g., One-to-One, One-to-Many, Many-to-Many mappings).
- Develops protocols for engaging with regulators and standards bodies to validate and approve mappings.
- Design regulatory analysis tooling leveraging AI/ML for automating compliance interpretation.
- Produces a framework for aligning regulatory requirements with continuous control monitoring and auditing.
Working Group Leadership
Larry Hughes
VP of Research & Development
Larry Hughes is the Vice President of Research and Development at the Cloud Security Alliance. With more than 20 years of experience in the security industry, Larry’s holds five advanced security certifications, including CCSK, CCSP, and CISSP. His past roles include Principal Consultant at LJH Cybersecurity, GRC Director at Equinix, and Head of Information Security at
Daniele Catteddu
Chief Technology Officer, CSA
Daniele Catteddu is an information security and risk management practitioner, technologies expert and privacy evangelist with over 15 of experience. He worked in several senior roles both in the private and public sector. He is member of various national and international security expert groups and committees on cyber-security and privacy, keynote speaker at several conferences and author of numerous studies and papers on risk management, ...
Andy Ruth
Content Developer, CSA
| Publications in Review | Open Until |
|---|---|
| Agentic AI Identity and Access Management: A New Approach | Jul 03, 2025 |
| Fully Homomorphic Encryption to CCM v4.0.1 Mapping | Jul 10, 2025 |
| AICM to ISO 42001 Mapping | Jul 10, 2025 |
Who can join?
Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.
What is the time commitment?
The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.
Virtual Meetings
Attend our next meeting. You can just listen in to decide if this group is a good for you or you can choose to actively participate. During these calls we discuss current projects, and well as share ideas for new projects. This is a good way to meet the other members of the group. You can view all research meetings here.
Jul
3
Recurring - CSA's CAR Initiative Monthly Meeting
The agenda will be sent in a meeting reminder the day before the meeting.
──────────
Andy Ruth is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://cloudsecurityalliance.zoom.us/j/87652631863?pwd=sgnKuOZkGZuJaoI5TqSY0siboHYp29.1
Meeting ID: 876 5263 1863
Passcode: 990651
---
One tap mobile
+12532158782,,87652631863# US (Tacoma)
+12532050468,,87652631863# US
---
Dial by your location
• +1 253 215 8782 US (Tacoma)
• +1 253 205 0468 US
• +1 669 444 9171 US
• +1 719 359 4580 US
• +1 720 707 2699 US (Denver)
• +1 346 248 7799 US (Houston)
• +1 507 473 4847 US
• +1 564 217 2000 US
• +1 646 558 8656 US (New York)
• +1 646 931 3860 US
• +1 689 278 1000 US
• +1 301 715 8592 US (Washington DC)
• +1 305 224 1968 US
• +1 309 205 3325 US
• +1 312 626 6799 US (Chicago)
• +1 360 209 5623 US
• +1 386 347 5053 US
Meeting ID: 876 5263 1863
Find your local number: https://cloudsecurityalliance.zoom.us/u/kbcd0Ixt3T
──────────
Aug
7
Recurring - CSA's CAR Initiative Monthly Meeting
The agenda will be sent in a meeting reminder the day before the meeting.
──────────
Andy Ruth is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://cloudsecurityalliance.zoom.us/j/87652631863?pwd=sgnKuOZkGZuJaoI5TqSY0siboHYp29.1
Meeting ID: 876 5263 1863
Passcode: 990651
---
One tap mobile
+12532158782,,87652631863# US (Tacoma)
+12532050468,,87652631863# US
---
Dial by your location
• +1 253 215 8782 US (Tacoma)
• +1 253 205 0468 US
• +1 669 444 9171 US
• +1 719 359 4580 US
• +1 720 707 2699 US (Denver)
• +1 346 248 7799 US (Houston)
• +1 507 473 4847 US
• +1 564 217 2000 US
• +1 646 558 8656 US (New York)
• +1 646 931 3860 US
• +1 689 278 1000 US
• +1 301 715 8592 US (Washington DC)
• +1 305 224 1968 US
• +1 309 205 3325 US
• +1 312 626 6799 US (Chicago)
• +1 360 209 5623 US
• +1 386 347 5053 US
Meeting ID: 876 5263 1863
Find your local number: https://cloudsecurityalliance.zoom.us/u/kbcd0Ixt3T
──────────
Open Peer Reviews
Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.