Cloud 101CircleEventsBlog
Participate in the Peer Review of SaaS Technical Controls!

Working Group

Cloud Incident Response

This working group aims to develop a holistic Cloud Incident Response framework that comprehensively covers key causes of cloud incidents (both security and non-security related), and their handling and mitigation strategies.
Cloud Incident Response Framework
Cloud Incident Response Framework

Download

Cloud Incident Response
Working Group Overview

This working group aims to develop a holistic Cloud Incident Response framework that comprehensively covers key causes of cloud incidents (both security and non-security related), and their handling and mitigation strategies.


Drafts & Important Docs




Working Group Leadership

Alex Siow
Alex Siow

Alex Siow

Soon Tein Lim
Soon Tein Lim

Soon Tein Lim

Publications in ReviewOpen Until
AICM mapping to BSI AI C4 CatalogMar 24, 2025
CCMv4.0 Mapping to HITRUST CSF v11.3Mar 25, 2025
SaaS Technical Controls Final DraftApr 03, 2025
The State of Data Privacy EngineeringApr 12, 2025
View all
Who can join?

Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.

What is the time commitment?

The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.

Open Peer Reviews

Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.

Learn how to participate in a peer review here.

AICM mapping to BSI AI C4 Catalog

Open Until: 03/24/2025

The AICM to BSI AI C4 Mapping initiative aims to ensure a comprehensive alignment between the CSA AI Controls Matrix (AICM)...

CCMv4.0 Mapping to HITRUST CSF v11.3

Open Until: 03/25/2025

The Cloud Security Alliance (CSA), would like to announce an additional ma...

SaaS Technical Controls Final Draft

Open Until: 04/03/2025

The Cloud Security Alliance (CSA), in collaboration with MongoDB, GuidePoint Security, and the SaaS Working Group, is invit...

The State of Data Privacy Engineering

Open Until: 04/12/2025

This paper provides a comprehensive overview of Data Privacy Engineering (DPE), its importance, and its application in toda...