Founded in 2013 by the Cloud Security Alliance, the Security Trust Assurance and Risk (STAR) registry encompasses key principles of transparency, rigorous auditing, and cloud security and privacy best ...

This working group aims to develop Zero Trust standards to achieve consistency for cloud, hybrid and mobile endpoint environments. The topic of group discourse include Zero Trust benefits, ...

Written by Erick Tauil, Presales Engineer. Alright, let’s dive into a topic that often feels like a riddle wrapped in an enigma: Zero Trust. Communicating its concepts to non-security stakeholders can ...

Written by Troy Leach, Chief Strategy Officer (CSO), CSA. We require a modern approach to accurately assess our use of current technology. This month marks 25 years since I managed my first ...

Written by CSA’s Top Threats Working Group. In this blog series, we cover the key security challenges from CSA's Top Threats to Cloud Computing 2024. Drawing from the insights of over 500 experts, ...

In today’s fast-paced DevOps environment, the demand for agile infrastructure deployment is driving innovation beyond traditional Infrastructure-as-Code (IaC). Code-less deployment solutions represent ...

Written by Megan Theimer, Content Program Specialist, CSA. As we celebrate 15 years of advancing cloud security, the Cloud Security Alliance (CSA) reflects on our role as the world’s leading ...

Originally published by CXO REvolutionaries. Written by Mike Gemza, CTO, Cornerstone Building Brands. At a time when cyberthreats are becoming more advanced and network infrastructure needs are ...

Written by Ken Huang, CEO of DistributedApps.ai and VP of Research at CSA GCR. Everyone seems to talk about Test-Time Computation or Test Time Compute (TTC) as a way to scale the reasoning capability ...

The security and compliance landscape is ever-evolving, meaning the demands organizations need to meet today can change rapidly. While most IT teams have defined processes to handle these requirements ...

The Volt Typhoon campaign has raised alarms across cybersecurity circles, targeting critical infrastructure with stealthy and sophisticated techniques. This analysis breaks down the methods, ...

Originally published by Scrut Automation. Written by Nicholas Muy, Chief Information Security Officer, Scrut Automation. On July 12, 2024, the European Union (EU) Official Journal published the full ...