CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | Zero Trust Guidance for Critical Infrastructure - Japanese Translation In most nations, the health of public services relies on secure and resilient Critical Infrastructure. We call these infrastructures "critical" because th... Request to download |
 | Context-Based Access Control for Zero Trust Traditional access decision-making is agnostic to both Zero Trust and context. Historically, security teams based access decisions on trust. The common ac... Request to download |
.png) | CCM Video Series: AIS - Application & Interface Security In this presentation, we introduce the CCM's Application and Interface Security (AIS) domain. With seven control specifications, the AIS domain is focused... Request to download |
.png) | CCM Video Series: CCC - Change Control & Configuration Management This presentation explores the Change Control and Configuration Management (CCCM) domain of the Cloud Control Matrix (CCM). With its nine control specific... Request to download |
.png) | CCM Video Series: CEK - Cryptography, Encryption, & Key Management In this presentation we explore the Cryptography, Encryption, and Key Management (CEK) domain within the Cloud Control Matrix (CCM) that comprises twenty-... Request to download |
.png) | CCM Video Series: HRS - Human Resources Security In this presentation we focus on the Human Resources (HRS) security domain, which comprises thirteen control specifications designed to help cloud organiz... Request to download |
.png) | CCM Video Series: IPY - Interoperability & Portability In this presentation we explore the Interoperability and Portability (IPY) domain of the Cloud Control Matrix (CCM), which comprises four control specific... Request to download |
.png) | CCM Video Series: LOG - Logging & Monitoring In this presentation we focus on the Logging and Monitoring domain, which includes thirteen control specifications that help both Cloud Service Providers ... Request to download |
.png) | CCM Video Series: STA - Supply Chain Mgmt, Transparency, & Accountability In this presentation we explore the Supply Chain Management, Transparency, and Accountability (STA) domain, which includes fourteen control specifications... Request to download |
.png) | CCM Video Series: TVM - Threat & Vulnerability Management In this presentation we cover the Threat and Vulnerability Management (TVM) domain, which features ten control specifications aimed at helping both Cloud ... Request to download |
.png) | CCM Video Series: BCR - Business Continuity Mgmt & Op Resilience In this presentation, we introduce the CCM business Continuity Management and Operational Resilience domain, comprising eleven control specifications. Thi... Request to download |
.png) | CCM Video Series: DSP - Data Security & Privacy In this presentation we explore the Data Security and Privacy Lifecycle Management (DSP) domain, which includes nineteen control specifications focused on... Request to download |
.png) | CCM Video Series: GRC - Governance, Risk Management, & Compliance In this presentation we introduce the*Governance, Risk Management, and Compliance (GRC) domain of CCM, which consists of eight control specifications. The... Request to download |
.png) | CCM Video Series: IVS - Infrastructure & Virtualization Security In this presentation we delve into the Infrastructure and Virtualization Security (IVS) domain, which comprises nine control specifications designed to gu... Request to download |
.png) | CCM Video Series: IAM - Identity & Access Management In this presentation we introduce the Identity and Access Management (IAM) domain, which includes sixteen control specifications aimed at helping both Clo... Request to download |
 | Zero Trust Guidance for Small and Medium Size Businesses (SMBs) Cybersecurity for small businesses involves unique and heightened challenges. This makes the adoption of a Zero Trust strategy critical for safeguarding t... Request to download |
.png) | AI Risk Management: Thinking Beyond Regulatory Boundaries Korean Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |
 | Cloud Security for Startups 2024 Volunteers from the CSA Israel Chapter produced this publication. The content development falls outside the CSA Research Lifecycle. For any questions and ... Request to download |
 | Key Management for Public Cloud Migration More and more organizations are adopting public cloud technologies. This leads to a mass data migration where existing applications that are on-premises o... Request to download |
 | Top Threats to Cloud Computing 2024 - Japanese Translation This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download |