CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | Release Date: 06/10/2021 The recent COVID-19 pandemic has increased the demand for data and accelerated the use of telehealth. The Health Resources and Services Administration (HRSA)... Request to download |
-Framework.png) | Cloud Incident Response Framework - Japanese Translation Release Date: 06/04/2021 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | CSA Guide to the IoT Security Controls Framework v2 - Japanese Translation Release Date: 05/28/2021 The Guide to the IoT Security Controls Framework provides instructions for using the companion CSA IoT Security Controls Framework spreadsheet. This guide ex... Request to download |
 | Cloud Solution Data Science COVID-19 Dashboard Release Date: 05/27/2021 This publication was produced through the efforts of chapters and volunteers but the content development falls outside of the CSA Research Lifecycle. For ... Request to download |
 | CSA Enterprise Architecture Reference Guide Release Date: 05/18/2021 The Enterprise Architecture Reference Guide v2 is a companion piece with the EA v2 to CCM v3.0.1 Mapping. The peer review for both documents are intended to ... Request to download |
 | Enterprise Architecture Reference Diagram Release Date: 05/18/2021 The CSA Enterprise Architecture (EA) is both a methodology and a set of tools. It is a framework, a comprehensive approach for the architecture of a secure c... Request to download |
 | Enterprise Architecture v2 to CCM v3.01 Mapping Guide Release Date: 05/18/2021 The Enterprise Architecture (EA) is the CSA’s standard cloud reference architecture while the Cloud Control Matrix (CCM) is the CSA’s standard control set. T... Request to download |
 | Enterprise Architecture to CCM v3.01 Reordered Mapping Release Date: 05/18/2021 The EA v2 to CCM v3.0.1 Mapping is a companion piece with the Enterprise Architecture Reference Guide v2. The peer review for both documents are intended to ... Request to download |
 | Disaster Recovery as a Service Release Date: 05/13/2021 Disaster Recovery as a Service (DRaaS) is a cloud computing service model that allows an organization to back up its data and IT infrastructure in a third... Request to download |
 | Cloud Incident Response Framework Release Date: 05/04/2021 This document aims to provide a Cloud Incident Response (CIR) framework that serves as a go-to guide for a CSC to effectively prepare for and manage cloud in... Request to download |
 | Critical Controls Implementation for Oracle E-Business Suite Release Date: 04/05/2021 This paper will help an organization determine what security changes are needed when deploying Oracle E-Business Suite (EBS) in the Cloud. For clarity, this ... Request to download |
 | Cloud Penetration Testing Playbook: Korean Translation Release Date: 04/02/2021 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Cloud Incident Response Working Group Charter Release Date: 02/14/2021 In today’s connected era, a comprehensive incident response strategy is an integral aspect of any organization aiming to manage and lower their risk profile.... Request to download |
 | The 2020 State of Identity Security in the Cloud Release Date: 11/19/2020 The use of cloud services have continued to increase over the past decade. Particularly in the wake of the COVID-19 public health crisis, many enterprises di... Request to download |
 | Survey Report - Security Practices in HPC & HPC Cloud Release Date: 10/08/2020 This survey report aims to provide insights to the level and type of cyber and cloud security adopted by High Performance Computing (HPC) / HPC Cloud infrast... Request to download |
 | Mobile Application Security Testing – Sum-Up & Landscape Overview Release Date: 07/13/2020 Users place a good deal of trust in mobile app stores’ abilities to review, test, flag and block apps that exhibit undesirable behavior. However, even with t... Request to download |
 | The Six Pillars of DevSecOps: Automation Release Date: 07/06/2020 Automation is a critical component of DevSecOps because it enables process efficiency, allowing developers, infrastructure, and information security teams to... Request to download |
 | Evolution of CASB Survey Report Release Date: 07/05/2020 The study on CASB, which queried more than 200 IT and security professionals from a variety of organization sizes and locations, examined the expectations, t... Request to download |
 | Financial Services Stakeholders Platform Working Group Charter Release Date: 06/09/2020 Information security plays an integral role in the regulation and protection of customers in the financial industry. Exploring cloud computing and the underl... Request to download |
| SDP: The Most Advanced Zero Trust Architecture Release Date: 05/27/2020 Today’s “Zero Trust” implementations are like putting up a wall with multiple doors and allowing people to come and pick a lock on the door. We are then just... Request to download |