Vår oppgave

Å fremme god praksis for å sikre skytjenester, og gi opplæring i bruk av skytjenester for å sikre alle andre former for databehandling.

Blockchain, personvern, risikovurdering og tilgangskontroll – i skya!

Cloud Security Alliance Norway inviterer til medlemsmøte 31. oktober på Teknologihuset! Vi ønsker velkommen til en spennende kveld, uansett om du er opptatt av GDPR, risikovurdering, tilgangskontroll til skytjenester eller blockchain – alt relatert til sky og...

Cloud Security Alliance etablerer nytt europeisk hovedkvarter i Berlin

Samtidig opprettes det også et "GDPR Center of Excellence" med fokus på personvern og personvernlovgivning spesielt knyttet til skytjenester. Cloud Security Alliance (CSA) er en organisasjon med over 90 000 medlemmer på verdensbasis, dedikert til å definere og øke...

De vanligste sikkerhetsfeilene i AWS S3

S3 er blant de eldste tjenestene på AWS og også blant de mest brukte for å lagre store mengder data - fra privatpersoner til noen av verdens største selskapene. Sikkerhetsfunksjonene er omfattende og mangfoldige - såpass mangfoldige at det kan være lett å miste...

US CLOUD Act øker bruken av kryptering

Clarifying Lawful Overseas Use of Data (CLOUD) Act ble i all stillhet vedtatt som lov i USA 23. mars 2018. Den gjør det kort fortalt mye enklere for amerikanske myndigheter å be om utlevering av data fra amerikanske tjenesteleverandører - uansett om tjenesten fysisk...

Samarbeidspartnere

Bedriftsmedlemmer

Blockchain, personvern, risikovurdering og tilgangskontroll – i skya!

14. Oct 2018

Cloud Security Alliance etablerer nytt europeisk hovedkvarter i Berlin

27. Sep 2018

De vanligste sikkerhetsfeilene i AWS S3

10. Sep 2018

US CLOUD Act øker bruken av kryptering

7. Sep 2018

CCSK workshop med 36 deltakere på ISF Høstkonferansen!

28. Aug 2018

Mandag 27. august gjennomførte Cloud Security Alliance Norway (CSAN) en CCSK workshop med 36 deltagere(!) som en del av programmet på ISF Høstkonferansen CCSK - Certificate of Cloud Security Knowledge - workshop er en del av et større opplegg med elæringskomponenter,...

Devoteam og Basefarm inn som sponsorer av Cloud Security Alliance Norway

25. Aug 2018

Cloud Security Alliance Norway ønsker Devoteam Fornebu Consulting og Basefarm velkommen som sponsorer for 2018 og 2019! Cloud Security Alliance (CSA) er en organisasjon med over 80 000 medlemmer på verdensbasis dedikert til å definere og øke bevisstheten rundt god...

Top Threats to Cloud Computing: Deep Dive

25. Aug 2018

Denne casestudien forsøker å konkretisere sikkerhetsanalyse ved å ved å bruke ni anekdoter sitert i "Top Threats"-grunnlaget. Hver av de ni eksemplene presenteres i form av (1) et referansediagram og (2) en detaljert fortelling. Referansediagrammets beskriver...

CSA Code of Conduct for GDPR Compliance

20. Aug 2018

Hva er CSAs retningslinjer for GDPR? Uansett om du er bedriftens personvernombud eller selv er en leverandør av skytjenester, gir CSA Code of Conduct for GDPR Compliance et konsekvent og omfattende rammeverk for å overholde EUs GDPR lovverk. Code of Conduct for GDPR...

State of Cloud Security 2018

5. May 2018

Rapporten, forfattet av CSA Global Enterprise Advisory Board, undersøker det økende omfanget i bruk av skytjenester og relatert teknologier, hva både bedrifter og skyleverandører gjør for å sikre at sikkerhetskravene er oppfylt, hvordan de fungerer best med...

Part 4: Detective Controls in AWS By Neha Thethi, Information Security Analyst, BH Consulting Security controls can be either technical or administrative. A layered security approach to protecting an organization’s information assets and infrastructure should include preventative controls, detective controls and corrective controls. Preventative controls exist to prevent the threat from coming in contact with the weakness. […] The post AWS Cloud: Proactive...
By Jacob Serpa, Product Marketing Manager, Bitglass Financial services organizations are a prime target for hackers looking to steal and sell valuable data. This is because these firms handle sensitive information known as PII, personally identifiable information, as well as other financial data. In Financial World: Breach Kingdom, Bitglass’ latest financial breach report, the Next-Gen CASB reveals information about […] The post Data Breaches on...
By the CSA Research Team The Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) Working Group has released a minor update for the CCM v3.0.1. This update incorporates mappings to IEC 62443-3-3 and BSI Compliance Controls Catalogue (C5). The CCM is specifically designed to provide fundamental security principles to guide cloud vendors and to assist […] The post Cloud Security Alliance...
By JR Santos, Executive Vice President of Research, Cloud Security Alliance. The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment, today announced the release of Guidance for Critical Areas of Focus in Cloud Computing 4.0 in Spanish. This is the […] The post Cloud Security Alliance...
By Rich Campagna, Chief Marketing Officer, Bitglass A competing CASB vendor blogged recently on why proxy-based Cloud Access Security Brokers (CASBs) shouldn’t be used for Office 365. The post cites “7 reasons,” all of which are variations of just one reason: their CASB breaks each time Microsoft makes changes to Office 365. What they call “application breakages” due to […] The post Seven Reasons Why...
By Jacob Serpa, Product Manager, Bitglass Here are the top cybersecurity stories of recent weeks: —Uber fined $148 million over cover-up —Apollo database of 200 million contacts breached —Chegg hack exposes 40 million users’ credentials —Port of San Diego faces cyberattack Uber fined $148 million over cover-up In late 2016, Uber suffered a breach at […] The post Bitglass Security Spotlight:...
By Jacob Serpa, Product Manager, Bitglass Here are the top cybersecurity headlines of recent weeks: —440 million email addresses exposed by Veeam —Unprotected MongoDB databases being targeted —42 million emails, passwords, and more leaked —Cold-boot attacks steal passwords and encryption keys —2 billion devices still vulnerable to Bluetooth attack —Atlas Quantum, cryptocurrency platform, breached —Security […] The post Bitglass Security Spotlight:...
By Rich Campagna, Chief Marketing Officer, Bitglass The Cloud Access Security Broker, or CASB, space has quickly made its way to the mainstream, with organizations of every size and every industry deploying CASBs whenever their data moves beyond the firewall. While ready for primetime and widely deployed, some enterprises are taking the risky step of skipping the […] The post POC the CASB...

The data security world changes so quickly it can be hard to keep up with the latest threats to corporate data. With countless stories of breaches, phishing scams, insider threats, government whistleblowers and cyber warfare, 2018 was the year all eyes turned to security teams and their role within an organization. In this webinar, a panel of security experts will...
Are your C-suiters putting valuable company IP at risk through careless data practices? If they're like most business leaders, they are. Nearly three-quarters of CEOs admit they’ve taken IP, ideas, and data from a former employer, and 95 percent admit to keeping a copy of their work on a personal device. A new report from Code42 and Sapio Research raises startling...
Zero Trust is quickly becoming the dominant security model for the cloud, shifting the perimeter from the network to the people and devices that make up a modern workforce. As a model with many moving parts, the immediate question is where to start? This session will focus on: - The full
Zero Trust reference architecture and steps to get there -...
As the network estate grows in size and complexity, the enterprise security team is responsible for ensuring a unified, comprehensive network security policy. But how can the team be sure about application connectivity and the correct implementation of change requests when applications span the breadth of on-premise, private and multi-cloud environments, each with its own security controls? In the face...
Want to transition on-premises workloads to the cloud, but are concerned about consistently securing access? Join us for a webinar where we discuss how you can easily and effectively apply secure access policies throughout your cloud migration, regardless of your infrastructure complexity or architectural starting point. By utilizing a modern, cloud-ready security architecture, you can maintain – and in fact,...
As we all know, cybersecurity is often a game of cat and mouse - attackers are always trying to outsmart us defenders. At Adobe, we face the same issues and concerns as all the other major companies. We must ask ourselves simple questions with non-simple answers: How do we ensure that all assets are protected? How do we ensure that...
Serverless architectures and FaaS services such as AWS Lambda make application development scalable, easy, and cheap. Plus, there’s no server to maintain or patch! But just because there’s no server doesn't mean there’s nothing to secure.
Serverless services and their dependencies still need to be used and configured correctly, which is why it’s important to maintain security visibility into your...
Data breaches can happen to any organization, so it's important to understand your organization's risk of a data breach. But where should you start your assessment? What practical and pragmatic steps can you take? In this presentation, we'll discuss the myths vs. the realities on how: - Breaches happen - The rapidly growing cloud and SaaS adoption changes the game for defenders -...