Vår oppgave

Å fremme god praksis for å sikre skytjenester, og gi opplæring i bruk av skytjenester for å sikre alle andre former for databehandling.

CCSK sertifiseringskurs på Sikkerhetsfestivalen 2019

Som på Høstkonferansen i fjor kjører CSA Sertifiseringskurs Certificate of Cloud Security Knowledge (CCSK) på Sikkerhetsfestivalen 2019, onsdag 28. august. Påmelding...

Nyvalgt styre 2019-2020 for Cloud Security Alliance Norway Chapter

Det ble 14. februar avholdt årsmøtet i Cloud Security Alliance Norway Chapter. Vi presenterer med dette det nye styret for 2019-2020! Styreleder: Eirik Gulbrandsen, Arrow (2020) Styremedlem: Gøran Tømte, Data Equipment (2020)Styremedlem: Hanne Wesselsen, Devoteam...

EY Norwegian Cloud Maturity Survey 2019

Bruk av skytjenester i Norge øker - men kompetansebehovet er stort og kompleksitet knyttet til migreringsprosjekter holder bruken tilbake. Det en åpenbar trend at driverene for å ta i bruk skytjenester ikke lenger er kostnadsreduksjon, men time-to-market og ønsket om...

Mapping of On-Premises Security Controls vs Major Cloud Providers Version 3.2 Feb 2019

"Mapping of On-Premises Security Controls vs Major Cloud Providers" foreligger nå i versjon 3.2 og er i tillegg til AWS, Azure og Google nå oppdatert til å inkludere Oracle, IBM og Alibaba - samtlige relevante skyleverandører for norske organisasjoner. Forfatteren av...

Samarbeidspartnere

Bedriftsmedlemmer

CCSK sertifiseringskurs på Sikkerhetsfestivalen 2019

11. Jun 2019

Som på Høstkonferansen i fjor kjører CSA Sertifiseringskurs Certificate of Cloud Security Knowledge (CCSK) på Sikkerhetsfestivalen 2019, onsdag 28. august. Påmelding...

Nyvalgt styre 2019-2020 for Cloud Security Alliance Norway Chapter

15. Feb 2019

EY Norwegian Cloud Maturity Survey 2019

14. Feb 2019

Mapping of On-Premises Security Controls vs Major Cloud Providers Version 3.2 Feb 2019

12. Feb 2019

Årsmøte 2019 Cloud Security Alliance Norway

1. Feb 2019

Årsmøte i Cloud Security Alliance Norway torsdag 14. februar 16:00 @ Radisson Blu Scandinavia Hotel (rett etter at Informasjonssikkerhetssporet på konferansen Software 2019 er ferdig - https://event.dnd.no/software/foredragsholdere/informasjonssikkerhet/) 1....

AWS etablerer kontor i Norge

31. Jan 2019

(og ikke fysiske datasentre tross initiell feilaktig påstand på NRK.no). Sak fra DN; Amerikansk it-gigant vil «overta» Norge Med kunder som DNB, Tine, XXL, NSB og Visma + "titusenvis" i Norden skulle det kommersielle grunnlaget være tilstede. DnB flyttet nylig hele...

Medlemsmøte 6. februar 2019 – m/ “Amundsen” førpremiere!

11. Jan 2019

Cloud Security Alliance Norway inviterer til et medlemsmøte litt utenom det vanlige onsdag 6. februar 2019 på Vika kino! Tema er "Ekspedisjon til skya" og er et seminar i samarbeid med Arrow, Microsoft, Veritas og opplevelsesselskapet Yourway. Som en del av opplegget...

Sikkerhetsfestivalen 2019 – Call for Presentations

8. Jan 2019

I august 2019 skjer det noe ekstra spennende innenfor sikkerhetsmiljøet i Norge; Sikkerhetsfestivalen 2019 - på Lillehammer 26-28. august 2019! For dere som kjenner den tradisjonelle "ISF Høstkonferansen" i regi av ISF Norge, så har ISF for sitt 25 års jubileum...

Typiske utfordringer knyttet til forståelsen av CCSK og CCSP

5. Dec 2018

Stadig flere innen IT - og IT-sikkerhet - har behov for å forholde seg til sikkerhetsproblemstillinger knyttet til bruken av skytjenester. To populære sertifiseringer i denne sammenhengen er Certificate of Cloud Security Knowledge (CCSK), i regi av Cloud Security...

Blockchain, personvern, risikovurdering og tilgangskontroll – i skya!

14. Oct 2018

Cloud Security Alliance Norway inviterer til medlemsmøte 31. oktober på Teknologihuset! Vi ønsker velkommen til en spennende kveld, uansett om du er opptatt av GDPR, risikovurdering, tilgangskontroll til skytjenester eller blockchain – alt relatert til sky og...

The Four Pillars of CASB: Data Protection

By Will Houcheime, Product Marketing Manager, Bitglass In this blog series, we discuss the key capabilities of cloud access security brokers (CASBs), and why organizations are turning to them as they migrate to the cloud. One of the four pillars of CASBs is data protection, which focuses on securing all information going back and forth from any […] The post The Four Pillars...
Egregious 11 Meta-Analysis Part 3: Weak Control Plane and DoS

By Victor Chin, Research Analyst, CSA This is the third blog post in the series where we analyze the security issues in the new iteration of the Top Threats to Cloud Computing report. Each blog post features a security issue that is being perceived as less relevant and one that is being perceived as more relevant. […] The post Egregious 11 Meta-Analysis...
Egregious 11 Meta-Analysis Part 2: Virtualizing Visibility

By Victor Chin, Research Analyst, CSA This is the second blog post in the series where we analyze the security issues in the new iteration of the Top Threats to Cloud Computing report. Each blog post features a security issue that is being perceived as less relevant and one that is being perceived as more […] The post Egregious 11 Meta-Analysis...
Open API Survey Report

By the Open API CSA Working Group Cloud Security Alliance completed its first-ever Open API Survey Report, in an effort to see exactly where the industry stood on the knowledge surrounding Open APIs as well as how business professionals and consumers were utilizing them day to day. The key traits taken from the survey will […] The post Open API Survey...
Cloud Security Roadmap for 2019 & Beyond

By Amélie Darchicourt, Product Marketing Manager, ExtraHop How to succeed under the shared responsibility model Cloud security is an evolving space where consumers and vendors must innovate quickly, not only to outpace attackers, but also to support rapid development while minimizing the risks presented by misconfiguration and other forms of user error. Your best bet […] The post Cloud Security Roadmap...
What Executives Should Know About the Capital One Breach

This article was originally published on Fugue's blog here. By Phillip Merrick, CEO of Fugue Most enterprises are already using public cloud computing services at scale or are planning to adopt the cloud soon. As an executive, chances are you’re paying attention to the Capital One data breach and wondering how this event should impact your […] The post What Executives Should...
How to Share the Security Responsibility Between the CSP and Customer

By Dr. Kai Chen, Chief Security Technology Officer, Consumer BG, Huawei Technologies Co. Ltd. The behemoths of cloud service providers (CSPs) have released shared security responsibility related papers and articles, explaining their roles and responsibilities in cloud provisioning. Although they share similar concepts, in reality, there are different interpretations and implementations among CSPs. While there […] The post How to Share...
Security Spotlight: iPhones Susceptible to a Hack via Text

By Juan Lugo, Product Marketing Manager at Bitglass Here are the top stories of recent weeks: iPhones Susceptible to a Hack via Text Democratic Senate campaign group exposed emails of 6.2 million Americans State Farm says Hackers Successfully Conducted a Credentials Stuffing Attack 96 Million Stream Gamers Susceptible to Breach Bluetooth Security Vulnerability Exposes Millions Of […] The post Security Spotlight: iPhones...

Why it's Time to Kill Your VPN

VPNs are dangerous and overly complex. So why are we still pretending that VPNs are an effective security technology? Join this webinar if you are responsible for implementing Zero Trust or managing complex VPN environments. Learn why: - VPNs cannot support your move to Zero Trust - Managing VPNs is too complex for delivering granular access to a mobile workforce - Eliminating VPNs can deliver...
How to Calculate, Communicate and Compare Your Cyber Exposure with Tenable Lumin

Tenable Lumin lets you measure and benchmark your organisation’s cyber exposure, providing comparisons across your organisation internally (business units, geographies, asset classes) and externally against your peers. Using Lumin, you will gain business insights needed to improve strategic decision-making and security posture. Lumin correlates vulnerability data with other risk indicators, such as threat intelligence and asset criticality. It then automatically...
Implementing CAIQ-Lite in a Cloud Vendor Security Assessment Workflow

Come learn how leading technology companies are optimizing cloud vendor security assessments by leveraging the recently-released CAIQ-Lite in their workflow. Also learn how and why the CAIQ-Lite came to be, as well as best practices from early adopters. Takeaways from this webinar include... - An introduction of the history/creation of the CAIQ-Lite - Best practices for using CAIQ-Lite to perform security assessments...
The Future of Audit and Compliance: Controls Automation

Over the past several years, we have developed and implemented Common Controls Framework (CCF) across Adobe, enabling our cloud products, services, platforms and operations to achieve compliance with various security certifications, standards, and regulations such as SOC2, ISO, PCI, HIPAA, FedRAMP and others. CCF is the foundational framework and backbone of our companywide security compliance strategy. It also provides the...
Don’t Let Your Security Slow Your Cloud Journey

Cloud adoption for some services is no longer optional, however security is what is overwhelmingly holding organizations back from doing more. Cloud and SaaS themselves are also evolving, which is changing the approach for securing access to them. The right security capabilities will allow you to address risk while having you ready for tomorrow.
Quandaries and Clouds: A Discussion on Cloud Security

Are you experiencing these common challenges in your cloud security program? There is no question that the way we work has changed with the rise of cloud and the widespread access to mobile devices. This shift in how we work requires us to also shift how we think about security when it comes to the cloud. Listen in as our panel...
No Passwords, No Problem: Using WebAuthn to Stop Account Takeover

Want to eliminate passwords? We all do. WebAuthn is a new web standard published by the World Wide Web Consortium (W3C) for users in the era of passwordless authentication for web applications. This new standard offers strong authenticators such as Touch ID or Face ID directly from your browser to keep attackers out while delivering first-class authentication experiences. Watch this webinar...
Protect Your Web Applications from Component Vulnerabilities

Web applications are becoming increasingly complex, with most applications now built using multiple layered components, such as web servers, web frameworks, language engines and JavaScript libraries. The growing number of cyber attacks stemming from component vulnerabilities highlights a limitation of conventional scanning for securing web applications. Join Tenable experts to learn how you can go beyond traditional scanning to better...