Cloud 101CircleEventsBlog
Register for CSA’s free Virtual Cloud Trust Summit to tackle enterprise challenges in cloud assurance.

Working Group

Internet of Things

This working group focuses on understanding the relevant use cases for IoT deployments and defining actionable guidance for security practitioners to secure their implementations.
View Current Projects
CSA IoT Security Controls Framework v2
CSA IoT Security Controls Framework v2

Download

Internet of Things
Internet of Things | Working Group Overview
This working group focuses on understanding the relevant use cases for IoT deployments and defining actionable guidance for security practitioners to secure their implementations. We welcome anyone who would like to join, even if you would like to just listen-in on your first call. 

What do we discuss? 
During these meetings we typically discuss changes in the industry and collaborate on projects the group is currently working on.

Drafts & Important Docs

Working Group Leadership

Brian Russell
Brian Russell

Brian Russell

Brian Russell is co-author of the book “Practical Internet of Things Security” and is a Chief Engineer focused on Cyber Security Solutions for Leidos (www.leidos.com). He oversees the design and development of security solutions and the implementation of privacy and trust controls for customers. Brian leads efforts that include security engineering for Unmanned Aerial Systems (UAS) and Connected Cars, and the development of hig...

Read more

Senthil Chandrasekaran
Senthil Chandrasekaran

Senthil Chandrasekaran

Senthil is a proven security product leader focused on building products that focus on customer trust without compromising user experience, and safety. He has over 15+ years of experience in cybersecurity in security engineering and operations, advisory, and security product management. Over the years, he has worked with F500 companies, technology firms, and startups on various domains within cybersecurity and currently leading the security...

Read more

Vaibhav Sharma
Vaibhav Sharma

Vaibhav Sharma

Global Product Services lead - Cyber Security CSA IOT Co-Chair at TÜV SÜD Product Service GmbH

Vaibhav has been working in industrial cyber security for the last 16 years. In the past, he worked for CSA as a ZTA exam reviewer. Currently also Senior Member for ISA Working Groups and Standard Committee. Strengths in Cloud security, risk Advisory Consulting, Operation Risk Assessments, program management, design & implementation specialist for project controls.

Strong industry experience with technical, communication & delivery sk...

Read more

Publications in ReviewOpen Until
CSA Large Language Model (LLM) Threats TaxonomyApr 19, 2024
Data Security - CCSK v5 Study GuideApr 22, 2024
Information Technology Governance, Risk, and Compliance in Healthcare v2Apr 26, 2024
Enterprise Authority To Operate (EATO) Controls FrameworkMay 12, 2024
View all
Who can join?

Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.

What is the time commitment?

The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.

Virtual Meetings

Attend our next meeting. You can just listen in to decide if this group is a good for you or you can choose to actively participate. During these calls we discuss current projects, and well as share ideas for new projects. This is a good way to meet the other members of the group. You can view all research meetings here.

Apr

25

Thu, April 25, 10:00am - 11:00am PDT
IoT Working Group
See details
AGENDA:
  • CSA Announcements
  • Open Discussion

---------------------
UPDATED DIAL-IN

Join Zoom Meeting
https://cloudsecurityalliance.zoom.us/j/98615915095?pwd=czdzcDd5Q2ZqaUlBUUZIcHVFcndpQT09

Meeting ID: 986 1591 5095
Passcode: 649991
One tap mobile
+12532158782,,98615915095# US (Tacoma)
+16699009128,,98615915095# US (San Jose)

Dial by your location
        +1 253 215 8782 US (Tacoma)
        +1 669 900 9128 US (San Jose)
        +1 346 248 7799 US (Houston)
        +1 646 558 8656 US (New York)
        +1 301 715 8592 US (Washington DC)
        +1 312 626 6799 US (Chicago)
Meeting ID: 986 1591 5095
Find your local number: https://cloudsecurityalliance.zoom.us/u/ac9Kgh0RX3

May

23

Thu, May 23, 10:00am - 11:00am PDT
IoT Working Group
See details
AGENDA:
  • CSA Announcements
  • Open Discussion

---------------------
UPDATED DIAL-IN

Join Zoom Meeting
https://cloudsecurityalliance.zoom.us/j/98615915095?pwd=czdzcDd5Q2ZqaUlBUUZIcHVFcndpQT09

Meeting ID: 986 1591 5095
Passcode: 649991
One tap mobile
+12532158782,,98615915095# US (Tacoma)
+16699009128,,98615915095# US (San Jose)

Dial by your location
        +1 253 215 8782 US (Tacoma)
        +1 669 900 9128 US (San Jose)
        +1 346 248 7799 US (Houston)
        +1 646 558 8656 US (New York)
        +1 301 715 8592 US (Washington DC)
        +1 312 626 6799 US (Chicago)
Meeting ID: 986 1591 5095
Find your local number: https://cloudsecurityalliance.zoom.us/u/ac9Kgh0RX3

Open Peer Reviews

Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.

Learn how to participate in a peer review here.

CSA Large Language Model (LLM) Threats Taxonomy

Open Until: 04/19/2024

This document establishes a common taxonomy and definitions for key terms related to AI risk scenarios, threats, and contro...

Data Security - CCSK v5 Study Guide

Open Until: 04/22/2024

Data security stands as a cornerstone of maintaining organizational integrity and confidentiality. The rapid expansion of c...

Information Technology Governance, Risk, and Compliance in Healthcare v2

Open Until: 04/26/2024

Cloud GRC is an effective means for organizations to gather important risk data, validate compliance, and report results. O...

Enterprise Authority To Operate (EATO) Controls Framework

Open Until: 05/12/2024

The Enterprise Authority To Operate (EATO) working group is opening their Controls Framework for open peer review.<...