CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | Zero Trust Guidance for Critical Infrastructure - Japanese Translation Release Date: 01/16/2025 In most nations, the health of public services relies on secure and resilient Critical Infrastructure. We call these infrastructures "critical" because th... Request to download |
 | Context-Based Access Control for Zero Trust Release Date: 01/15/2025 Traditional access decision-making is agnostic to both Zero Trust and context. Historically, security teams based access decisions on trust. The common ac... Request to download |
 | Zero Trust Guidance for Small and Medium Size Businesses (SMBs) Release Date: 01/13/2025 Cybersecurity for small businesses involves unique and heightened challenges. This makes the adoption of a Zero Trust strategy critical for safeguarding t... Request to download |
.png) | AI Risk Management: Thinking Beyond Regulatory Boundaries Korean Translation Release Date: 01/09/2025 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Cloud Security for Startups 2024 Release Date: 12/18/2024 Volunteers from the CSA Israel Chapter produced this publication. The content development falls outside the CSA Research Lifecycle. For any questions and ... Request to download |
 | Key Management for Public Cloud Migration Release Date: 12/17/2024 More and more organizations are adopting public cloud technologies. This leads to a mass data migration where existing applications that are on-premises o... Request to download |
 | Top Threats to Cloud Computing 2024 - Japanese Translation Release Date: 12/12/2024 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Cyber Resiliency in the Financial Industry 2024 Survey Report Release Date: 12/09/2024 Data resiliency and operational security have become increasingly critical as digital transformation accelerates. The financial industry faces distinct ch... Request to download |
 | AI Resilience A Revolutionary Benchmarking Model for AI Safety - Korean Translation Release Date: 12/03/2024 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | CCM v4.0 Implementation Guidelines - Japanese Translation Release Date: 12/03/2024 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Map the Transaction Flows for Zero Trust Release Date: 11/18/2024 The NSTAC Report to the President on Zero Trust defines five steps to implementing a Zero Trust security strategy. This publication provides guidance on e... Request to download |
.png) | CCM Video Series: IPY - Interoperability & Portability Release Date: 11/18/2024 In this presentation we explore the Interoperability and Portability (IPY) domain of the Cloud Control Matrix (CCM), which comprises four control specific... Request to download |
 | AI Risk Management: Thinking Beyond Regulatory Boundaries Release Date: 11/13/2024 While artificial intelligence (AI) offers tremendous benefits, it also introduces significant risks and challenges that remain unaddressed. A comprehensiv... Request to download |
 | Top Concerns With Vulnerability Data Release Date: 11/11/2024 The top vulnerability management frameworks used today include the Common Vulnerabilities and Exposures (CVE) program and the Common Vulnerability Scoring... Request to download |
.png) | CCM Video Series: A&A - Audit & Assurance Release Date: 11/11/2024 In this presentation we introduce the Audit and Assurance (A&A) domain within the Cloud Control Matrix (CCM). The A&A domain, consisting of six co... Request to download |
.png) | CCM Video Series: AIS - Application & Interface Security Release Date: 11/10/2024 In this presentation, we introduce the CCM's Application and Interface Security (AIS) domain. With seven control specifications, the AIS domain is focused... Request to download |
 | Using Asymmetric Cryptography to Help Achieve Zero Trust Objectives Release Date: 11/05/2024 This publication explores the use of asymmetric cryptography in Zero Trust. Asymmetric cryptography provides an industry-standard, secure method to establ... Request to download |
.png) | CCM Video Series: HRS - Human Resources Security Release Date: 11/04/2024 In this presentation we focus on the Human Resources (HRS) security domain, which comprises thirteen control specifications designed to help cloud organiz... Request to download |
.png) | CCM Video Series: GRC - Governance, Risk Management, & Compliance Release Date: 11/04/2024 In this presentation we introduce the*Governance, Risk Management, and Compliance (GRC) domain of CCM, which consists of eight control specifications. The... Request to download |
.png) | CCM Video Series: CCC - Change Control & Configuration Management Release Date: 11/02/2024 This presentation explores the Change Control and Configuration Management (CCCM) domain of the Cloud Control Matrix (CCM). With its nine control specific... Request to download |