Vår oppgave

Å fremme god praksis for å sikre skytjenester, og gi opplæring i bruk av skytjenester for å sikre alle andre former for databehandling.

Medlemsmøte 6. februar 2019 – m/ “Amundsen” førpremiere!

Cloud Security Alliance Norway inviterer til et medlemsmøte litt utenom det vanlige onsdag 6. februar 2019 på Vika kino! Tema er "Ekspedisjon til skya" og er et seminar i samarbeid med Arrow, Microsoft, Veritas og opplevelsesselskapet Yourway. Som en del av opplegget...

Sikkerhetsfestivalen 2019 – Call for Presentations

I august 2019 skjer det noe ekstra spennende innenfor sikkerhetsmiljøet i Norge; Sikkerhetsfestivalen 2019 - på Lillehammer 26-28. august 2019! For dere som kjenner den tradisjonelle "ISF Høstkonferansen" i regi av ISF Norge, så har ISF for sitt 25 års jubileum...

Typiske utfordringer knyttet til forståelsen av CCSK og CCSP

Stadig flere innen IT - og IT-sikkerhet - har behov for å forholde seg til sikkerhetsproblemstillinger knyttet til bruken av skytjenester. To populære sertifiseringer i denne sammenhengen er Certificate of Cloud Security Knowledge (CCSK), i regi av Cloud Security...

Blockchain, personvern, risikovurdering og tilgangskontroll – i skya!

Cloud Security Alliance Norway inviterer til medlemsmøte 31. oktober på Teknologihuset! Vi ønsker velkommen til en spennende kveld, uansett om du er opptatt av GDPR, risikovurdering, tilgangskontroll til skytjenester eller blockchain – alt relatert til sky og...

Samarbeidspartnere

Bedriftsmedlemmer

Medlemsmøte 6. februar 2019 – m/ “Amundsen” førpremiere!

11. Jan 2019

Sikkerhetsfestivalen 2019 – Call for Presentations

8. Jan 2019

Typiske utfordringer knyttet til forståelsen av CCSK og CCSP

5. Dec 2018

Blockchain, personvern, risikovurdering og tilgangskontroll – i skya!

14. Oct 2018

Cloud Security Alliance etablerer nytt europeisk hovedkvarter i Berlin

27. Sep 2018

Samtidig opprettes det også et "GDPR Center of Excellence" med fokus på personvern og personvernlovgivning spesielt knyttet til skytjenester. Cloud Security Alliance (CSA) er en organisasjon med over 90 000 medlemmer på verdensbasis, dedikert til å definere og øke...

De vanligste sikkerhetsfeilene i AWS S3

10. Sep 2018

S3 er blant de eldste tjenestene på AWS og også blant de mest brukte for å lagre store mengder data - fra privatpersoner til noen av verdens største selskapene. Sikkerhetsfunksjonene er omfattende og mangfoldige - såpass mangfoldige at det kan være lett å miste...

US CLOUD Act øker bruken av kryptering

7. Sep 2018

Clarifying Lawful Overseas Use of Data (CLOUD) Act ble i all stillhet vedtatt som lov i USA 23. mars 2018. Den gjør det kort fortalt mye enklere for amerikanske myndigheter å be om utlevering av data fra amerikanske tjenesteleverandører - uansett om tjenesten fysisk...

CCSK workshop med 36 deltakere på ISF Høstkonferansen!

28. Aug 2018

Mandag 27. august gjennomførte Cloud Security Alliance Norway (CSAN) en CCSK workshop med 36 deltagere(!) som en del av programmet på ISF Høstkonferansen CCSK - Certificate of Cloud Security Knowledge - workshop er en del av et større opplegg med elæringskomponenter,...

Devoteam og Basefarm inn som sponsorer av Cloud Security Alliance Norway

25. Aug 2018

Cloud Security Alliance Norway ønsker Devoteam Fornebu Consulting og Basefarm velkommen som sponsorer for 2018 og 2019! Cloud Security Alliance (CSA) er en organisasjon med over 80 000 medlemmer på verdensbasis dedikert til å definere og øke bevisstheten rundt god...

Top Threats to Cloud Computing: Deep Dive

25. Aug 2018

Denne casestudien forsøker å konkretisere sikkerhetsanalyse ved å ved å bruke ni anekdoter sitert i "Top Threats"-grunnlaget. Hver av de ni eksemplene presenteres i form av (1) et referansediagram og (2) en detaljert fortelling. Referansediagrammets beskriver...

CCM Addenda Updates for Two Additional Standards

By the CSA CCM Working Group Dear Colleagues, We’re happy to announce the publication of the updated Cloud Controls Matrix (CCM) Addenda for the following standards: — German Federal Office for Information Security (BSI) Cloud Computing Compliance Controls Catalogue (C5) — ISO/IEC 27002, ISO/IEC 27017 and ISO/IEC 27018 These CCM addenda aim to help organizations assess […] The post CCM Addenda Updates...
Cloud Threat Report: Emotet, Dridex, Mylobot Malware Activity – Week of 11/26

By Curtis Jordan, Lead Security Engineer, TruSTAR In TruSTAR, we see that Emotet has been on the rise, particularly over the last two weeks. Also, because of crossover with Dridex C&C servers, we’re seeing an increase in Dridex activity as well. Another piece of malware to be on the lookout for is Mylobot. Mylobot is a highly sophisticated […] The post Cloud Threat Report:...
Addressing the Skills Gap in Cloud Security Professionals

By Ryan Bergsma, Training Program Director, CSA One of the math lessons that has always stuck with me from childhood is that if you took a penny and doubled it every day for a month, it would make you a millionaire. In fact, it wouldn’t even take the whole month, you would be a millionaire on […] The post Addressing the Skills...
Keeping Your Boat Afloat with a Cloud Access Security Broker

By Prasidh Srikanth, Senior Product Manager, Bitglass If you were on a sinking ship that was full of holes of various sizes, which ones would you patch first? Probably the big ones. Now, consider this: As an enterprise, you’ve been successfully sailing and securing your corporate data on premises for some time. However, now you’re migrating […] The post Keeping Your Boat...
Development of Cloud Security Guidance, with Mapping MY PDPA Standard to CCM Control Domains, Jointly Developed by MDEC and CSA

By Ekta Mishra, Research Analyst/APAC, Cloud Security Alliance The Cloud Security Alliance Cloud Controls Matrix (CCM) provides a controls framework that gives detailed understanding of security concepts and principles that are aligned to the Cloud Security Alliance guidance in 13 domains. The foundations of the CSA CCM rest on its customized relationship to other industry-accepted […] The post Development of Cloud...
OneTrust and Cloud Security Alliance Partner to Launch Free Vendor Risk Tool for CSA Members

By Gabrielle Ferree, Public Relations and Marketing Manager, OneTrust OneTrust is excited to announce that we have partnered with Cloud Security Alliance to launch a free Vendor Risk Management (VRM) tool. The tool, available to CSA members today, automates the vendor risk lifecycle for compliance with the GDPR, CCPA and other global privacy frameworks. Get started […] The post OneTrust and Cloud...
Typical Challenges in Understanding CCSK and CCSP: Technology Architecture

By Peter HJ van Eijk, Head Coach and Cloud Architect, ClubCloudComputing.com As cloud computing is becoming increasingly mainstream, more people are seeking cloud computing security certification. Because I teach prep courses for the two most popular certifications—the Certificate of Cloud Security Knowledge (CCSK), organized by the Cloud Security Alliance (CSA), and the Certified Cloud Security […] The post Typical Challenges in...
Bitglass Security Spotlight: US Government Breaches Abound

By Jacob Serpa, Product Manager, Bitglass Here are the top cybersecurity headlines of recent weeks: —Healthcare.gov breached —US weapons systems contain cybersecurity gaps —Over 35 million US voter records for sale —National Guard faces ransomware attack Healthcare.gov breached 75,000 people had their personal details stolen when hackers breached a government system that is frequently used […] The post Bitglass Security Spotlight:...

Third-Party Cloud Management

Cloud computing offers massive scalability, availability and low-cost services as major benefits, but as with most new technologies, it introduces new risks. Because there is so much opportunity in the cloud, the cloud service provider network is continuously growing. Service providers are using different technologies, different standards, and like all companies have different competency levels. A couple of the...
The Top 10 Things I Learned by Phishing my Company

Ninety-one percent of organizations in a recent TechValidate survey say they have seen phishing attacks on their organization in the past year. What’s more, 42% report more than 10 phishing attacks on their network in that time. What can be done to reduce these risks and protect your data and users? Phishing simulation tools are a powerful way to see...
Avoid the Breach with Effective Application Security Testing

Security is a top priority for e-commerce giant Shopify, with over 600,000 businesses in 175 countries trusting them to sell online and everywhere in the world. Join Shopify's Vice President of Security Engineering and IT, Andrew Dunbar and HackerOne as they discuss best practices for testing and securing your cloud-based web applications. The session will also cover how you can...
Want Better Management of Cloud Security Risk? Live Where Your People Live

Expecting your (relatively) small staff of security specialists we all have to handle security, risk management, and good governance entirely on their own is a recipe for disaster. While specialists are critical to ensuring products and processes are designed well, promote security, and ease compliance, real security and good governance requires dissemination of knowledge throughout the organization. To truly understand...
Measuring Cybersecurity through Behavioral Analytics - an Outside-In Approach

Please join us on the 17th of January as Jasson Casey, CTO at SecurityScorecard, describes the state of cybersecurity in the modern world, and what best practices are for measuring it - differently. He will discuss the importance of behavioral analytics, and how to make use of an “outside-in approach” when measuring cybersecurity. He will relate how to apply...
Vendor Risk Management from the GDPR to California Privacy (CCPA)

In this webinar, we will deep dive into managing the vendor lifecycle under the GDPR, California Privacy (CCPA), and other global regulations. As organizations continue to improve their privacy and security programs, streamlining third-and fourth-party vendor risk has become a priority. This includes everything from filling out vendor assessments like the CSA Consensus Assessments Initiative Questionnaire (CAIQ), gaining sufficient guarantees...
Container Security Best Practices: A How-To Discussion

Application containers like Docker help DevOps work faster and quicken time-to-market, but they also create a major Cyber Exposure gap. Traditional vulnerability management approaches can’t easily secure containers – let alone keep pace with the high-velocity world of DevOps and continuous innovation. But don’t despair. We’ve got just the thing to save you from this nightmarish ordeal. Join us as...
2018: The Year in Data Security Panel Discussion

The data security world changes so quickly it can be hard to keep up with the latest threats to corporate data. With countless stories of breaches, phishing scams, insider threats, government whistleblowers and cyber warfare, 2018 was the year all eyes turned to security teams and their role within an organization. In this webinar, a panel of security experts will...