Vår oppgave

Å fremme god praksis for å sikre skytjenester, og gi opplæring i bruk av skytjenester for å sikre alle andre former for databehandling.

Møt Mr “ZeroTrust” John Kindervag i Oslo 16. oktober!

Det er Nasjonal Sikkerhetsmåned og hva er da bedre enn å gå direkte til kilden for å høre mer om Zero Trust? Zero Trust har blitt et begrep stadig flere hører om. Produsenter omtaler det og benytter det i sin markedsføring. Hva er egentlig dette? Det fortelles så...

"The Qube" - Clarion hotel og congress Oslo airport

CCSK sertifiseringskurs på Normkonferansen 2019

Cloud Security Alliance Norway kjører i samarbeid med Direktoratet for e-helse CSAs Sertifiseringskurs Certificate of Cloud Security Knowledge (CCSK) på Normkonferansen 2019, mandag 25. november. Mer informasjon om kurset på Normkonferansens sider. Velg deretter...

CCSK sertifiseringskurs på Sikkerhetsfestivalen 2019

Som på Høstkonferansen i fjor kjører CSA Sertifiseringskurs Certificate of Cloud Security Knowledge (CCSK) på Sikkerhetsfestivalen 2019, onsdag 28. august. Påmelding...

Nyvalgt styre 2019-2020 for Cloud Security Alliance Norway Chapter

Det ble 14. februar avholdt årsmøtet i Cloud Security Alliance Norway Chapter. Vi presenterer med dette det nye styret for 2019-2020! Styreleder: Eirik Gulbrandsen, Arrow (2020) Styremedlem: Gøran Tømte, Data Equipment (2020)Styremedlem: Hanne Wesselsen, Devoteam...

Samarbeidspartnere

Bedriftsmedlemmer

Møt Mr “ZeroTrust” John Kindervag i Oslo 16. oktober!

25. Sep 2019

CCSK sertifiseringskurs på Normkonferansen 2019

28. Aug 2019

CCSK sertifiseringskurs på Sikkerhetsfestivalen 2019

11. Jun 2019

Som på Høstkonferansen i fjor kjører CSA Sertifiseringskurs Certificate of Cloud Security Knowledge (CCSK) på Sikkerhetsfestivalen 2019, onsdag 28. august. Påmelding...

Nyvalgt styre 2019-2020 for Cloud Security Alliance Norway Chapter

15. Feb 2019

EY Norwegian Cloud Maturity Survey 2019

14. Feb 2019

Bruk av skytjenester i Norge øker - men kompetansebehovet er stort og kompleksitet knyttet til migreringsprosjekter holder bruken tilbake. Det en åpenbar trend at driverene for å ta i bruk skytjenester ikke lenger er kostnadsreduksjon, men time-to-market og ønsket om...

Mapping of On-Premises Security Controls vs Major Cloud Providers Version 3.2 Feb 2019

12. Feb 2019

"Mapping of On-Premises Security Controls vs Major Cloud Providers" foreligger nå i versjon 3.2 og er i tillegg til AWS, Azure og Google nå oppdatert til å inkludere Oracle, IBM og Alibaba - samtlige relevante skyleverandører for norske organisasjoner. Forfatteren av...

Årsmøte 2019 Cloud Security Alliance Norway

1. Feb 2019

Årsmøte i Cloud Security Alliance Norway torsdag 14. februar 16:00 @ Radisson Blu Scandinavia Hotel (rett etter at Informasjonssikkerhetssporet på konferansen Software 2019 er ferdig - https://event.dnd.no/software/foredragsholdere/informasjonssikkerhet/) 1....

AWS etablerer kontor i Norge

31. Jan 2019

(og ikke fysiske datasentre tross initiell feilaktig påstand på NRK.no). Sak fra DN; Amerikansk it-gigant vil «overta» Norge Med kunder som DNB, Tine, XXL, NSB og Visma + "titusenvis" i Norden skulle det kommersielle grunnlaget være tilstede. DnB flyttet nylig hele...

Medlemsmøte 6. februar 2019 – m/ “Amundsen” førpremiere!

11. Jan 2019

Cloud Security Alliance Norway inviterer til et medlemsmøte litt utenom det vanlige onsdag 6. februar 2019 på Vika kino! Tema er "Ekspedisjon til skya" og er et seminar i samarbeid med Arrow, Microsoft, Veritas og opplevelsesselskapet Yourway. Som en del av opplegget...

Sikkerhetsfestivalen 2019 – Call for Presentations

8. Jan 2019

I august 2019 skjer det noe ekstra spennende innenfor sikkerhetsmiljøet i Norge; Sikkerhetsfestivalen 2019 - på Lillehammer 26-28. august 2019! For dere som kjenner den tradisjonelle "ISF Høstkonferansen" i regi av ISF Norge, så har ISF for sitt 25 års jubileum...

Introducing Reflexive Security for integrating security, development and operations

By the CSA DevSecOps Working Group Organizations today are confronted with spiraling compliance governance costs, a shortage of information security professionals, and a disconnect between strategic security and operational security. Due to these challenges, more and more companies value agility and integrated operations. In short, a security management program must now deliver more for less to […] The post Introducing Reflexive Security...
It’s all about the Data! – Preventative Security

By John DiMaria, Assurance Investigatory Fellow, Cloud Security Alliance I have always said I am a “data guy.” Decisions made with data eliminate all bias, opinions, and ad hoc decisions that cause potential costly moves. In my most recent podcast interview with Phillip Merrick, CEO of Fugue, he discussed how vendors sometimes use security events in […] The post It’s all about...
Cloud Penetration Testing the Capital One Breach

By Alexander Getsin, Lead Author for Cloud Penetration Testing Playbook Aligning the Capital One breach with the CSA Cloud Penetration Testing Playbook In March 2019, Capital One suffered a unique cloud breach. 140,000 Social Security numbers and 80,000 linked bank account numbers were exposed, along with some 1 million Canadian Social Insurance Numbers. It isn’t […] The post Cloud Penetration Testing...
Cloud Security Posture Management: Why You Need It Now

By Samantha Nguyen, Product Manager, Bitglass Gartner recommends that security and risk management leaders invest in CSPM (cloud security posture management) processes and tools to avoid misconfigurations that can lead to data leakage. Although it is a relatively new class of tools, this recommendation comes with reason; CSPM allows for just what its name implies: the management […] The post Cloud Security Posture...
Guardians of the Cloud: The Latest Security Findings

By Juan Lugo from Bitglass With the emergence of cloud adoption and BYOD in the workplace, companies are experiencing an overwhelming amount of data breaches. This is largely because they are not taking the appropriate steps to secure data in the cloud. As such, Bitglass conducted a survey with IT professionals from a leading cybersecurity community […] The post Guardians of the...
Why you can’t have backdoored crypto that is secure

By Kurt Seifried, Chief Blockchain Officer, CSA So as you have probably seen some parts of the US government are again making noise about end-to-end encryption. We’ve seen this before (clipper chip, key escrow, etc., etc.). The new twist is that they appear to be trying a thin end of the wedge approach, banning end-to-end […] The post Why you can’t...
What to Expect at the 2019 Colorado Chapter Forum

Understanding the complexities of cloud security can be very challenging. Because of this, Cloud Security Alliance has membership opportunities, resources, certifications, and local chapters to help explain it. The Colorado Chapter of Cloud Security Alliance is pleased to announce its 4th annual Fall Summit on Thursday, November 7th, 2019. Register here. This all-day event will be at the Arvada […] The post What to Expect...
How Blockchain Might Save Us All

By Kurt Seifried, Chief Blockchain Officer, CSA I’ve been seeing a lot of articles claiming that Blockchain will save us from hackers, and ransomware, and all sorts of other Cyber-Shenanigans. So… will Blockchain save us all? Yes, well . . . sort of, it’s complicated. Let’s start with a story: The evolution of web bwosers […] The post How Blockchain Might...

Reimagine Your Perimeter

Recent research shows that more than 85% of web traffic is comprised of cloud services. The rapid adoption of cloud and mobile is fundamentally changing network traffic patterns and the movement of data, rendering existing network and security models obsolete. This shift is resulting in enterprise security teams supplementing next-gen firewalls (NGFWs), secure web gateways (SWGs), and VPNs with cloud...
Transformation of Cybersecurity Risk

The cyber landscape is continuing to evolve, and we're seeing digital trends continue to change. Digital technologies are accelerating the ability to do business, and really digitizing everything. In some ways, it's becoming quite common and helping people grow, fast. But at the same time, it raises incredibly significant challenges about cyber security risk, and challenges the way that we...
How to Stop Cloud Threats by Leveraging CASB With a People-Centric Cybersecurity

Once your organization migrates to the cloud, protecting your people and the data they create becomes more challenging and critical than ever. Cybercriminals are launching wide-scale brute force attacks on cloud services to compromise user accounts. 85% of Office 365 and G Suite tenants are targeted. After taking over your trusted accounts, threat actors use social engineering tactics to...
A New Prescription for Cyber Security - Global IT Asset Inventory

Most people think that a network is a static event. However, with new types of devices, transient workloads, contract and guest participation, the system is fluid. At any given time,15-20% of the network is unseen or unmanaged. This is why the principle of maximum IT asset visibility is a fundamental prerequisite to improving your security posture. Simply put, it is...
Why it's Time to Kill Your VPN

VPNs are dangerous and overly complex. So why are we still pretending that VPNs are an effective security technology? Join this webinar if you are responsible for implementing Zero Trust or managing complex VPN environments. Learn why: - VPNs cannot support your move to Zero Trust - Managing VPNs is too complex for delivering granular access to a mobile workforce - Eliminating VPNs can deliver...
Master the Fundamentals of VM Analysis and Prioritization

Learn how you can effectively analyze vulnerability data to prioritize patching and remediation to reduce cyber exposure. Overcome vulnerability overload and gain insight into the following topics: 1. Recognizing the value and limitations of CVSS scores for prioritization 2. Identifying vulnerabilities most likely to be exploited in the near term 3. Incorporating asset criticality into your analysis 4. How to compare the effectiveness of...
Diversify Defense — Improving Cybersecurity Through Smart Consolidation

The rush to innovate has resulted in more sophisticated threat defenses, but it has also created a complex web of tools that must be managed by an already overworked and understaffed security team. Heterogeneity of defense systems is itself a defense, so modern security teams need to approach consolidation differently. In this session, Jeff Costlow, Deputy CISO at ExtraHop will give...
Zero Trust Application Delivery Pipeline

Zero Trust is a concept that is typically used to describe the security model for a company's infrastructure and data. Application delivery pipelines are typically managed using a perimeter-centric security model. In this session, we will discuss how to apply the core concepts of Zero Trust to the application delivery pipeline, helping to ensure your applications are delivered to production...