CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | What CISOs Need to Know About Cloud Computing | Summary Release Date: 01/14/2014 Request to download |
 | SAFEcode/CSA: Practices for Secure Development of Cloud Applications Release Date: 12/04/2013 SAFECode and CSA partnered to determine whether additional software security guidance was needed to address unique threats to the cloud computing, and if so,... Request to download |
 | Release Date: 12/01/2013 This document explains the software defined perimeter (SDP) security framework and how it can be deployed to protect application infrastructure from network-... Request to download |
 | Net+ Initiative CCM v.3 Candidate Mappings Release Date: 12/01/2013 A team of 30 CIOs, CISOs, and other executives from Internet2’s membership (both higher education institutions and industry service providers) developed this... Request to download |
 | Release Date: 10/07/2013 This info sheet is for an old version of the Cloud Controls Matrix (CCM). You learn more about the latest version of the CCM and download it here: https://cl... Request to download |
 | Release Date: 09/26/2013 There is a new version of CCM available. The latest version has been combined with the Cloud Controls Matrix. Cloud Controls Matrix (CCM) Version 3.0, is a... Request to download |
 | Big Data Analytics for Security Intelligence Release Date: 09/24/2013 Request to download |
 | Publicizing Your STAR Certification Release Date: 09/03/2013 The following guidelines will help you to apply good practice in publicizing, communicating and promoting your certification to stakeholders, including staff... Request to download |
 | Government Access to Information Release Date: 07/23/2013 The survey received almost 500 responses from CSA members around the world. It found that 56% of non-US residents were now less likely to use US-based cloud ... Request to download |
 | Mapping the Forensic Standard ISO/IEC 27037 to Cloud Computing Release Date: 06/26/2013 The purpose of this document is to survey the issues related to forensic investigation in cloud environments, to describe the international standards for clo... Request to download |
 | Expanded Top Ten Big Data Security and Privacy Challenges Release Date: 06/16/2013 Big Data remains one of the most talked about technology trends in 2013. But lost among all the excitement about the potential of Big Data are the very real ... Request to download |
 | Cloud Computing Vulnerability Incidents: A Statistical Overview Release Date: 05/31/2013 In an attempt to ascertain Cloud Computing reliability, 11,491 news articles on cloud computing-related outages from 39 news sources between Jan 2008 and Feb... Request to download |
 | Planning for E-Discovery in the Cloud Release Date: 05/21/2013 Request to download |
 | Cloud Computing: What Damages in Case of Outages Release Date: 05/21/2013 Service interruptions are inevitable regardless of whether the cloud service provider is a small company or a large company. When a cloud service goes down, ... Request to download |
 | Release Date: 03/08/2013 This is an old version of the Cloud Controls Matrix (CCM). You learn more and download the latest version of the CCM here: https://cloudsecurityalliance.org/... Request to download |
 | Release Date: 03/08/2013 Request to download |
 | Release Date: 02/25/2013 The Enterprise Architecture is both a methodology and a set of tools that enable security architects, enterprise architects and risk management professionals... Request to download |
 | CSA Position Paper on AICPA Service Organization Control Reports Release Date: 02/25/2013 The Cloud Security Alliance (CSA) has drafted the CSA Position Paper on AICPA Service Organization Control Reports as a means to educate its members and prov... Request to download |
| Privacy Level Agreement (PLA) Outline Annex Release Date: 02/24/2013 Request to download |
 | Privacy Level Agreement (PLA) Outline for the Sale of Cloud Services in the European Union Release Date: 02/24/2013 The Outline provides a structure for Cloud Service Providers (CSP) to disclose, in a consistent matter, information about the privacy and data protection pol... Request to download |