Working Group
SaaS Governance
This group aims to benefit all parties in the Software-as-a-Service (SaaS) ecosystem by supporting a common understanding of SaaS related risks from the perspectives of the cloud customer and cloud service provider.
View Current ProjectsWorking Group Leadership
Ronald Tse
CEO, Ribose
Ronald has served CSA in numerous capacities, including as a member of CSA's APAC Research Advisory and International Standardization Council. Additionally, he co-chairs the Open Certification Framework (OCF), SaaS Governance, and DevSecOps working groups. He is the founder and CEO of Ribose, where under his leadership the company has been consistently awarded the industry's highest cloud security ratings, including being the on...
| Publications in Review | Open Until |
|---|---|
| CSA Large Language Model (LLM) Threats Taxonomy | Apr 19, 2024 |
| Data Security - CCSK v5 Study Guide | Apr 22, 2024 |
| Information Technology Governance, Risk, and Compliance in Healthcare v2 | Apr 26, 2024 |
| Enterprise Authority To Operate (EATO) Controls Framework | May 12, 2024 |
Who can join?
Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.
What is the time commitment?
The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.
Virtual Meetings
Attend our next meeting. You can just listen in to decide if this group is a good for you or you can choose to actively participate. During these calls we discuss current projects, and well as share ideas for new projects. This is a good way to meet the other members of the group. You can view all research meetings here.
No scheduled meetings for this working group in the next 60 days.
Open Peer Reviews
Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.