Working Group
Security Guidance
The advancement toward secure cloud computing requires active participation from a broad set of globally-distributed stakeholders.
Security Guidance for Critical Areas of Focus in Cloud Computing v5
Working Group Leadership
Rich Mogull
Chief Analyst, CSA
Rich is the Chief Analyst at the Cloud Security Alliance where he focuses on leading-edge cloud and AI security research and implementation. He has over 25 years of security experience, with over 15 years of focusing on cloud and emerging technologies. Prior to joining the CSA full time Rich frequently collaborated with CSA as the principle course designer of the CCSK training class, primary author of the Guidance, and developer of the Clou...
| Publications in Review | Open Until |
|---|---|
| Standards-Benchmarks-Maturity | Dec 13, 2025 |
| Open Source Red Teaming Tool: PyRIT Automation Capability in Agentic Red Team Testing Environments | Dec 13, 2025 |
| Using Zero Trust Against Identity Spoofing and Abuse | Dec 20, 2025 |
| Using Zero Trust to Secure Enterprise Information in LLM Environments | Dec 20, 2025 |
Who can join?
Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.
What is the time commitment?
The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.
Open Peer Reviews
Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.