CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | Integrating SDP and DNS: Enhanced Zero Trust Policy Enforcement Release Date: 04/12/2022 The purpose of this research article is to explain how DNS and the enterprise-managed DDI system can be combined with a Software-Defined Perimeter to deli... Request to download |
 | SaaS Security and Misconfigurations Report Release Date: 04/11/2022 Many recent breaches and data leaks have been tied back to misconfigurations causing it to be a top concern for many organizations. Most research related ... Request to download |
.png) | State of Cloud Security Concerns, Challenges, and Incidents - Chinese Translation Release Date: 04/06/2022 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Toward a Zero Trust Architecture - Korean Translation Release Date: 04/05/2022 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Global Security Database Working Group Charter Release Date: 04/01/2022 The scope of this project is to identify and understand the problems around vulnerability discovery, reporting, publication, tracking, and classification.... Request to download |
 | Guideline on Effectively Managing Security Service in the Cloud - Korean Translation Release Date: 03/21/2022 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Release Date: 03/17/2022 Compliance requires a comprehensive review of services and processes related to cloud infrastructure and how it is managed during a data lifecycle. STAR f... Request to download |
 | CCM v4 - Indonesian Translation Release Date: 03/14/2022 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Software-Defined Perimeter (SDP) Specification v2.0 Release Date: 03/10/2022 The Software-Defined Perimeter (SDP) architecture is an effective way to implement the principles of Zero Trust. SDP aims to give enterprise security arch... Request to download |
 | Blockchain/Distributed Ledger Technology (DLT) Risk and Security Considerations Release Date: 02/16/2022 There is no shortage of guidance on how to design, configure and deploy Fabric solutions. This paper provides insights into how the three layers of blockc... Request to download |
 | Release Date: 02/15/2022 This charter lays out the scope, responsibilities, and roadmap for the IoT Working Group. The Cloud Security Alliance (CSA) IoT Working Group (IoTWG) plan... Request to download |
 | Toward a Zero Trust Architecture - Japanese Translation Release Date: 02/10/2022 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Cybersecurity Best Practices for the Manufacturing Industry Release Date: 02/09/2022 This publication was produced through the efforts of chapters and volunteers but the content development falls outside of the CSA Research Lifecycle. For ... Request to download |
 | DevSecOps - Pillar 4 Bridging Compliance and Development Release Date: 02/08/2022 Given the rapid evolution of software development paradigms and practices, it has become a challenge to align monolithic security compliance activities wi... Request to download |
topthreatscover.png) | Top Threats to Cloud Computing Pandemic Eleven - Chinese Translation Release Date: 02/07/2022 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | The 2020 State of Identity Security in the Cloud - Chinese Translation Release Date: 02/07/2022 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | SaaS Governance Best Practices for Cloud Customers - Chinese Translation Release Date: 02/07/2022 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Guide to the Internet of Things (IoT) Security Controls Framework v2 - Chinese Translation Release Date: 02/07/2022 The Guide to the IoT Security Controls Framework provides instructions for using the companion CSA IoT Security Controls Framework v2 spreadsheet. This guide... Request to download |
 | Protecting the Privacy of Healthcare Data in the Cloud - Chinese Translation Release Date: 02/07/2022 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Integrating SDP and DNS: Enhanced Zero Trust Policy Enforcement - Chinese Translation Release Date: 02/07/2022 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |