CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | Quantum Safe Security Glossary The Quantum-Safe Security (QSS) Working Group was formed to address key generation and transmission methods and to help the industry understand quantum-safe ... Request to download |
 | Cloud Adoption and Security in India The “State on Cloud Adoption and Security in 2016: India” survey was circulated in an effort to understand and evaluate cloud computing trends in India. We h... Request to download |
 | Cloud Adoption Practices & Priorities in the Chinese Financial Sector We circulated the “Financial Services Industry Cloud Adoption Survey: China” survey to IT and security professionals in the Financial Services Institutions (... Request to download |
 | CloudWatch2 Risk Based Decision Making Mechanisms For Cloud Service In The Public Sector Despite the undisputed advantages of cloud computing, customers (in particular Public Administrations or PAs, and Small and Medium-sized Enterprises or SMEs)... Request to download |
 | Defeating Insider Threats As a follow up to the Top Threats in Cloud Computing and from the months of May to July 2016 we surveyed approximately 100 professionals on the extent of the... Request to download |
 | Future Proofing the Connected World An IoT system is only as secure as its weakest link, this document is our attempt at providing actionable and useful guidance for securing the individual pro... Request to download |
 | Big Data Security and Privacy Handbook The term “big data” refers to the massive amounts of digital information companies and governments collect about human beings and our environment. This Cloud... Request to download |
 | Mitigating Risk With several years of cloud adoption in organizations, approaches to security have been evolving rapidly. To dig deeper into these concerns and the controls ... Request to download |
 | Re-Think Security |
 | Mobile Application Security Testing The Mobile Application Security Testing (MAST) Initiative is a research which aims to help organizations and individuals reduce the possible risk exposures a... Request to download |
 | Quantum Random Number Generators A random number is generated by a process whose outcome is unpredictable, and which cannot be reliably reproduced. Randomness, quantitatively measured by ent... Request to download |
 | Identity Security The goal of the Identity Solutions: Security Beyond the Perimeter survey was to address Insufficient Identity, Credential, and Access Management and gain a b... Request to download |
 | CSA STAR Program & Open Certification Framework in 2016 and Beyond The Cloud Security Alliance (CSA) Security, Trust and Assurance Registry (STAR) program is the industry’s leading trust mark for cloud security. The CSA Open... Request to download |
 | Identity and Access Management for the Internet of Things - Japanese Translation This document is the first in a series of summary guidance aimed at providing easily understandable recommendations to information technology staff charged ... Request to download |
 | Mobile Application Security Testing Initiative Revised Charter Mobile applications are becoming an integral part of not just modern enterprises but also of human existence and a huge part of this shift is due to the emer... Request to download |
 | Security as a Service Implementation Guidance (Categories 1-10) In order to improve the understanding of Security as a Service and accelerate market acceptance, clear categorization and definitions of security services... Request to download |
 | Defining Categories of Security as a Service: Continuous Monitoring In order to improve the understanding of Security as a Service and accelerate market acceptance, clear categorization and definitions of these services is ne... Request to download |
 | ‘The Treacherous Twelve’ Cloud Computing Top Threats in 2016 “The Treacherous 12 - Cloud Computing Top Threats in 2016” plays a crucial role in the CSA research ecosystem. The purpose of the report is to provide organi... Request to download |
 | Security Position Paper - Network Function Virtualization This white paper discusses some of the potential security issues and concerns, and offers guidance for securing a Virtual Network Function (NFV) based archit... Request to download |
 | State of Cloud Security 2016 Cloud computing is an incredible innovation. While at its heart a simple concept, the packaging of compute resources as an on demand service is having a fund... Request to download |