CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | Guide to IoT Framework: Chinese Translation Release Date: 06/24/2019 The Guide to the IoT Security Controls Framework provides instructions for using the companion CSA IoT Security Controls Framework spreadsheet. This guide ex... Request to download |
 | Software Defined Perimeter for Infrastructure as a Service: Chinese Translation Release Date: 06/24/2019 Obtain a clear sense of the security challenges facing enterprise users of IaaS, understand the problems that arise from combining native IaaS access control... Request to download |
 | IoT Controls Framework: Chinese Translation Release Date: 06/24/2019 The Internet of Things (IoT) Security Controls Framework introduces the base-level security controls required to mitigate many of the risks associated with a... Request to download |
 | Release Date: 06/24/2019 In this document CSA provides an approach to assess risk in SaaS cloud computing. It takes into account the security challenges in a cloud computing environm... Request to download |
| Software Defined Perimeter for Infrastructure as a Service: Japanese Translation Release Date: 06/23/2019 Obtain a clear sense of the security challenges facing enterprise users of IaaS, understand the problems that arise from combining native IaaS access control... Request to download |
 | Mitigating the Quantum Threat with Hybrid Cryptography Release Date: 06/17/2019 Focus of this document is on four hybrid cryptographic schemes which provide both classical security of classical crypto and the quantum security of a quantu... Request to download |
 | Top 20 Critical Controls for Cloud ERP Customers Release Date: 06/10/2019 This document aims to be a guide for assessing and prioritizing the most critical controls that organizations should take into account when trying to secure ... Request to download |
| Cloud Penetration Testing Guidance Release Date: 06/07/2019 This document aims to be a guide for conducting penetration testing on cloud services. The document outlines important aspects such as the scoping of cloud p... Request to download |
 | Cloud Security Alliance Code of Conduct for GDPR Compliance (Updated - September 2020) Release Date: 06/03/2019 The CSA Code of Conduct is designed to offer both a compliance tool for GDPR compliance and transparency guidelines regarding the level of data protection o... Request to download |
 | Preparing Enterprises for the Quantum Computing Cybersecurity Threats Release Date: 05/23/2019 Quantum computing, while expected to help make many advancements, will also break the existing asymmetric-key cryptosystems, thus endangering our security in... Request to download |
 | Release Date: 05/21/2019 CSA’s latest survey examines information security concerns in complex cloud environment. The survey of 700 IT and security professionals aims to analyze and ... Request to download |
 | Cloud OS Security Specification Release Date: 05/07/2019 This document builds on the foundation provided by ISO/IEC 17788, ISO/IEC 19941, ISO/IEC 27000, NIST SP 500-299, and NIST SP 800-144 in the context of cloud ... Request to download |
 | Release Date: 05/07/2019 Software Defined Perimeter (SDP) Architecture Guide is designed to leverage proven, standards-based components to stop network attacks against application in... Request to download |
| Hybrid Cloud Security Services Charter Release Date: 04/25/2019 This initiative aims to develop a security white paper specifying hybrid cloud security risks and countermeasures, helping users identify and reduce the risk... Request to download |
| Release Date: 04/09/2019 The Cloud Key Management Working Group will facilitate the standards for seamless integration between CSPs and Key Broker vendor platforms. It will ensure th... Request to download |
| Release Date: 04/09/2019 In order to improve understanding, perception, and thus reputation, Security as a Service requires a clear definition and direction to ensure it is understoo... Request to download |
 | Release Date: 03/05/2019 Lessons from the Cloud - David Cass, Chief Information Security Officer Cloud and SaaS Operations & Global Partner Cloud Security Services, IBM ... Request to download |
 | CSA IoT Security Controls Framework Release Date: 03/05/2019 The Internet of Things (IoT) Security Controls Framework introduces the base-level security controls required to mitigate many of the risks associated with a... Request to download |
 | CSA Guide to the IoT Security Controls Framework Release Date: 03/05/2019 The Guide to the IoT Security Controls Framework provides instructions for using the companion CSA IoT Security Controls Framework spreadsheet. This guide ex... Request to download |
 | STAR Continuous Technical Guidance Release Date: 02/27/2019 STAR Continuous specifies the necessary activities and conditions for the continuous auditing of the cloud service over a defined set of security requirement... Request to download |