Home | CSA
1 day ago · CSA membership benefits cater to the needs of every phase throughout the cloud journey. Whether your goal is to develop a secure cloud strategy, gain customer trust, empower your workforce, enhance brand awareness, or engage in diverse networking opportunities, CSA membership is the solution. Discover membership benefits →.
Cloud Controls Matrix (CCM) - CSA
The CSA Cloud Controls Matrix (CCM) is a cybersecurity control framework for cloud computing. It is composed of 197 control objectives that are structured in 17 domains covering all key aspects of cloud technology. It can be used as a tool for the systematic assessment of a cloud implementation, and provides guidance on which security controls ...
Certificate of Cloud Security Knowledge
Start Course. Certificate of Cloud Security Knowledge - Exam Bundle v5. This course includes the CCSK exam token and teaches the fundamentals of cloud security including: terminology, architecture, data security governance, risk and compliance, cloud workloads, application security, and more. Start Course. All Courses.
STAR - CSA
STAR Attestation: For SOC 2. The CSA STAR Attestation is a collaboration between CSA and the AICPA to provide guidelines for CPAs to conduct SOC 2 engagements using criteria from the AICPA (Trust Service Principles, AT 101) and the CSA Cloud Controls Matrix.The STAR Attestation provides for rigorous third party independent assessments of cloud providers.
Cloud Controls Matrix and CAIQ v4 | CSA - Cloud Security Alliance
The Cloud Controls Matrix (CCM) is a cybersecurity control framework for cloud computing aligned to the CSA best practices, that is considered the de-facto standard for cloud security and privacy. The accompanying questionnaire, CAIQ, provides a set of “yes or no” questions based on the security controls in the CCM.
Certificate of Cloud Security Knowledge (CCSK) | CSA
CCSK v5 has undergone significant updates to align with modern cloud security needs. Enhancements include: Consolidated Domain Structure: The content has been reorganized into 12 domains instead of 14, with a more effective grouping of topics. Increased and Refined Focus Areas: The certificate now offers increased coverage on Cloud Workloads, emphasizing Serverless/FaaS, along with expanded ...
Top Cloud Threats | CSA
Jun 9, 2022 · CSA created a bi-annual survey report to help the industry stay up to date on the latest threats, risks, and vulnerabilities in the cloud. Such issues are often the result of the shared, on-demand nature of cloud computing. In these reports we survey industry experts on security issues in the cloud industry and they rate salient threats, risks and vulnerabilities in …
An Analysis of the 2020 Zoom Breach | CSA - Cloud Security Alliance
Mar 13, 2022 · Due to the COVID-19 pandemic, Zoom experienced a huge user uptick with multiple incidents throughout early 2020. Several issues managed to creep in, including poorly randomized, easily guessed or widely broadcast meeting room information without sufficient detective or preventive security controls. Customer credential use was rampant with the ...
CSA Security Guidance for Cloud Computing | CSA
This domain lays the foundational framework for the Cloud Security Alliance (CSA) Security Guidance. It covers the definitions, baseline terminologies, controls, deployment, and architectural models crucial for understanding cloud computing. Learners will explore the transformative impact of cloud computing and its benefits when properly ...
What is the Shared Responsibility Model in the Cloud?
Jan 25, 2024 · As the name implies, the shared responsibility model delineates who is responsible for what in regards to a cloud environment. This responsibility matrix varies depending on the cloud provider, service model, and deployment model. Here, we’ll cover how the shared responsibility model is applied to security, governance, compliance, and ...