ChaptersCircleEventsBlog
Share how your organization adapts IAM practices to AI. Take the AI Identify Risk & Readiness Survey today!

Working Group

Internet of Things

This working group focuses on understanding the relevant use cases for IoT deployments and defining actionable guidance for security practitioners to secure their implementations.
View Current Projects
Guide to the IoT Controls Matrix v3
Guide to the IoT Controls Matrix v3

Download

Internet of Things
Internet of Things | Working Group Overview
This working group focuses on understanding the relevant use cases for IoT deployments and defining actionable guidance for security practitioners to secure their implementations. We welcome anyone who would like to join, even if you would like to just listen-in on your first call. 

What do we discuss? 
During these meetings we typically discuss changes in the industry and collaborate on projects the group is currently working on.

Drafts & Important Docs

Working Group Leadership

Brian Russell
Brian Russell

Brian Russell

Brian Russell is co-author of the book “Practical Internet of Things Security” and is a Chief Engineer focused on Cyber Security Solutions for Leidos (www.leidos.com). He oversees the design and development of security solutions and the implementation of privacy and trust controls for customers. Brian leads efforts that include security engineering for Unmanned Aerial Systems (UAS) and Connected Cars, and the development of hig...

Read more

Senthil Chandrasekaran
Senthil Chandrasekaran

Senthil Chandrasekaran

Senthil is a proven security product leader focused on building products that focus on customer trust without compromising user experience, and safety. He has over 15+ years of experience in cybersecurity in security engineering and operations, advisory, and security product management. Over the years, he has worked with F500 companies, technology firms, and startups on various domains within cybersecurity and currently leading the security...

Read more

Vaibhav Sharma
Vaibhav Sharma

Vaibhav Sharma

AVP Cyber Security, TÜV SÜD

Vaibhav is working in industrial cyber security from last 18 years. Senior Member for ISA Working Groups and standard committee. Strengths in Cloud security, risk Advisory Consulting, Operation Risk Assessments, program management, design & implementation specialist for project controls.

Strong industry experience with technical, communication & delivery skills in green field, brown field & migrations project acro...

Read more

Publications in ReviewOpen Until
CCM v4.1Aug 08, 2025
CAIQ v4.1Aug 08, 2025
CCMv4.1 Auditing GuidelinesAug 14, 2025
AICM to EU AI Act MappingAug 15, 2025
View all
Who can join?

Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.

What is the time commitment?

The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.

Virtual Meetings

Attend our next meeting. You can just listen in to decide if this group is a good for you or you can choose to actively participate. During these calls we discuss current projects, and well as share ideas for new projects. This is a good way to meet the other members of the group. You can view all research meetings here.

Open Peer Reviews

Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.

Learn how to participate in a peer review here.

CCM v4.1

Open Until: 08/08/2025

The Cloud Security Alliance (CSA) in collaboration with the CCM WG is pleased to announce the release of the Final ...

CAIQ v4.1

Open Until: 08/08/2025

The Cloud Security Alliance (CSA), in collaboration with the Cloud Controls Matrix (CCM) Working Group are pleased to annou...

CCMv4.1 Auditing Guidelines

Open Until: 08/14/2025

The Cloud Security Alliance (CSA), in collaboration with the Cloud Controls Matrix (CCM) Working Group, is pleased to annou...

AICM to EU AI Act Mapping

Open Until: 08/15/2025

This mapping aims to identify the alignment between the AICM’s controls and the EU AI Act’s requirements, identifying areas...