ChaptersEventsBlog
We're exploring how organizations adapt IAM to AI. Take the AI Identity and Risk Readiness Survey by September 5 →

Working Group

Data Security

Data security is the process of protecting digital information from unauthorized access, corruption, or theft throughout its entire lifecycle.
View Current Projects
Data Security Working Group Charter 2023
Data Security Working Group Charter 2023

Download

Data security is the process of protecting digital information from unauthorized access, corruption, or theft throughout its entire lifecycle. It’s a concept that encompasses every aspect of information security from the physical security of hardware and storage devices, administrative and access controls, logical security of software applications, and organizational policies and procedures. When properly implemented, data security strategies will protect an organization’s information assets against cyberattacks, as well as guard against insider threats and human error, which remains among the leading causes of data breaches.

Current projects:

Working Group Leadership

Alex Kaluza
Alex Kaluza

Alex Kaluza

Research Analyst, CSA

Publications in ReviewOpen Until
Data Security within AI EnvironmentsAug 29, 2025
AICM Auditing GuidelinesSep 03, 2025
A Practitioner’s Guide to Post-Quantum CryptographySep 17, 2025
Cloud Threat Modeling 2025Sep 19, 2025
View all
Who can join?

Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.

What is the time commitment?

The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.

Open Peer Reviews

Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.

Learn how to participate in a peer review here.

Data Security within AI Environments

Open Until: 08/29/2025

 AI’s demand for large and diverse datasets introduces significant cybersecurity risks across the entire data lifecycl...

AICM Auditing Guidelines

Open Until: 09/03/2025

Auditing steps for each of the 243 controls of the AI Controls Matrix for internal or external auditors that are going to e...

A Practitioner’s Guide to Post-Quantum Cryptography

Open Until: 09/17/2025

As quantum computing advances, the threat it poses to classical cryptographic algorithms becomes increasingly urgent. This ...

Cloud Threat Modeling 2025

Open Until: 09/19/2025

The purpose of this document is to enable and encourage effective threat modeling for cloud applications, services, and sec...