Vår oppgave

Å fremme god praksis for å sikre skytjenester, og gi opplæring i bruk av skytjenester for å sikre alle andre former for databehandling.

Blockchain, personvern, risikovurdering og tilgangskontroll – i skya!

Cloud Security Alliance Norway inviterer til medlemsmøte 31. oktober på Teknologihuset! Vi ønsker velkommen til en spennende kveld, uansett om du er opptatt av GDPR, risikovurdering, tilgangskontroll til skytjenester eller blockchain – alt relatert til sky og...

Cloud Security Alliance etablerer nytt europeisk hovedkvarter i Berlin

Samtidig opprettes det også et "GDPR Center of Excellence" med fokus på personvern og personvernlovgivning spesielt knyttet til skytjenester. Cloud Security Alliance (CSA) er en organisasjon med over 90 000 medlemmer på verdensbasis, dedikert til å definere og øke...

De vanligste sikkerhetsfeilene i AWS S3

S3 er blant de eldste tjenestene på AWS og også blant de mest brukte for å lagre store mengder data - fra privatpersoner til noen av verdens største selskapene. Sikkerhetsfunksjonene er omfattende og mangfoldige - såpass mangfoldige at det kan være lett å miste...

US CLOUD Act øker bruken av kryptering

Clarifying Lawful Overseas Use of Data (CLOUD) Act ble i all stillhet vedtatt som lov i USA 23. mars 2018. Den gjør det kort fortalt mye enklere for amerikanske myndigheter å be om utlevering av data fra amerikanske tjenesteleverandører - uansett om tjenesten fysisk...

Samarbeidspartnere

Bedriftsmedlemmer

Blockchain, personvern, risikovurdering og tilgangskontroll – i skya!

14. Oct 2018

Cloud Security Alliance etablerer nytt europeisk hovedkvarter i Berlin

27. Sep 2018

De vanligste sikkerhetsfeilene i AWS S3

10. Sep 2018

US CLOUD Act øker bruken av kryptering

7. Sep 2018

CCSK workshop med 36 deltakere på ISF Høstkonferansen!

28. Aug 2018

Mandag 27. august gjennomførte Cloud Security Alliance Norway (CSAN) en CCSK workshop med 36 deltagere(!) som en del av programmet på ISF Høstkonferansen CCSK - Certificate of Cloud Security Knowledge - workshop er en del av et større opplegg med elæringskomponenter,...

Devoteam og Basefarm inn som sponsorer av Cloud Security Alliance Norway

25. Aug 2018

Cloud Security Alliance Norway ønsker Devoteam Fornebu Consulting og Basefarm velkommen som sponsorer for 2018 og 2019! Cloud Security Alliance (CSA) er en organisasjon med over 80 000 medlemmer på verdensbasis dedikert til å definere og øke bevisstheten rundt god...

Top Threats to Cloud Computing: Deep Dive

25. Aug 2018

Denne casestudien forsøker å konkretisere sikkerhetsanalyse ved å ved å bruke ni anekdoter sitert i "Top Threats"-grunnlaget. Hver av de ni eksemplene presenteres i form av (1) et referansediagram og (2) en detaljert fortelling. Referansediagrammets beskriver...

CSA Code of Conduct for GDPR Compliance

20. Aug 2018

Hva er CSAs retningslinjer for GDPR? Uansett om du er bedriftens personvernombud eller selv er en leverandør av skytjenester, gir CSA Code of Conduct for GDPR Compliance et konsekvent og omfattende rammeverk for å overholde EUs GDPR lovverk. Code of Conduct for GDPR...

State of Cloud Security 2018

5. May 2018

Rapporten, forfattet av CSA Global Enterprise Advisory Board, undersøker det økende omfanget i bruk av skytjenester og relatert teknologier, hva både bedrifter og skyleverandører gjør for å sikre at sikkerhetskravene er oppfylt, hvordan de fungerer best med...

Weigh in on the Cloud Control Matrix Addenda

Dear Colleagues, The Cloud Security Alliance would like to invite you to review and comment on the Cloud Control Matrix (CCM) addenda for the following standards: —German Federal Office for Information Security (BSI) Cloud Computing Compliance Controls Catalogue (C5). (Add your comments to CCM-C5.) —ISO/IEC 27002, ISO/IEC 27017 and ISO/IEC 27018. (Add your comments to CCM-ISO.) These […] The post Weigh in on...
Voice Your Opinion on the New Top Threats to Cloud Computing

Dear Colleagues, The CSA Top Threats Working Group is happy to announce the survey for the next iteration of the Top Threats to Cloud Computing report. This time round we have shortlisted 19 security issues from recurring issues such as Data Breaches and Insecure Interfaces and APIs to new issues such as Weak Control Plane. […] The post Voice Your Opinion...
CCSK Success Stories: Cloud Security Training from a CTO’s Perspective

By the CSA Education Team We’re kicking off a series on cloud security training today with a Q&A with the Vice President and CTO of Fusion Risk Management, Cory Cowgill. With a background in enterprise software development spanning multiple industries, Cowgill has multiple certifications including Salesforce System Architect and Application Architect, Amazon Web Services Solution […] The post CCSK Success Stories:...
Cloud Security Alliance Releases Minor Update to CCM v3.0.1

By the CSA Research Team The Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) Working Group has released a minor update for the CCM v3.0.1. This update incorporates mappings to IEC 62443-3-3 and BSI Compliance Controls Catalogue (C5). The CCM is specifically designed to provide fundamental security principles to guide cloud vendors and to assist […] The post Cloud Security Alliance...
Cloud Security Alliance Announces the Release of the Spanish Translation of Guidance 4.0

By JR Santos, Executive Vice President of Research, Cloud Security Alliance. The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment, today announced the release of Guidance for Critical Areas of Focus in Cloud Computing 4.0 in Spanish. This is the […] The post Cloud Security Alliance...
AWS Cloud: Proactive Security and Forensic Readiness – Part 4

Part 4: Detective Controls in AWS By Neha Thethi, Information Security Analyst, BH Consulting Security controls can be either technical or administrative. A layered security approach to protecting an organization’s information assets and infrastructure should include preventative controls, detective controls and corrective controls. Preventative controls exist to prevent the threat from coming in contact with the weakness. […] The post AWS Cloud: Proactive...
Data Breaches on the Rise in Financial Services

By Jacob Serpa, Product Marketing Manager, Bitglass Financial services organizations are a prime target for hackers looking to steal and sell valuable data. This is because these firms handle sensitive information known as PII, personally identifiable information, as well as other financial data. In Financial World: Breach Kingdom, Bitglass’ latest financial breach report, the Next-Gen CASB reveals information about […] The post Data Breaches on...
Seven Reasons Why Proxy-based CASBs Are Required for Office 365

By Rich Campagna, Chief Marketing Officer, Bitglass A competing CASB vendor blogged recently on why proxy-based Cloud Access Security Brokers (CASBs) shouldn’t be used for Office 365. The post cites “7 reasons,” all of which are variations of just one reason: their CASB breaks each time Microsoft makes changes to Office 365. What they call “application breakages” due to […] The post Seven Reasons Why...

AWS Macie vs. CASB

Last year Amazon Web Services (AWS) announced Amazon Macie, a new security service that uses machine intelligence for automatically discovering, classifying, and protecting sensitive data in AWS. Macie allows organizations to scan their S3 instances and identify if any PII (personally identifiable information) is present. CASBs (Cloud Access Security Brokers) on the other hand offer similar capabilities in addition to...
Container Security Best Practices: A How-To Discussion

Application containers like Docker help DevOps work faster and quicken time-to-market, but they also create a major Cyber Exposure gap. Traditional vulnerability management approaches can’t easily secure containers – let alone keep pace with the high-velocity world of DevOps and continuous innovation. But don’t despair. We’ve got just the thing to save you from this nightmarish ordeal. Join us as...
2018: The Year in Data Security Panel Discussion

The data security world changes so quickly it can be hard to keep up with the latest threats to corporate data. With countless stories of breaches, phishing scams, insider threats, government whistleblowers and cyber warfare, 2018 was the year all eyes turned to security teams and their role within an organization. In this webinar, a panel of security experts will...
2018 Data Exposure Report

Are your C-suiters putting valuable company IP at risk through careless data practices? If they're like most business leaders, they are. Nearly three-quarters of CEOs admit they’ve taken IP, ideas, and data from a former employer, and 95 percent admit to keeping a copy of their work on a personal device. A new report from Code42 and Sapio Research raises startling...
Zero Trust in Practice: Why Identity Drives Next-Gen Access

Zero Trust is quickly becoming the dominant security model for the cloud, shifting the perimeter from the network to the people and devices that make up a modern workforce. As a model with many moving parts, the immediate question is where to start? This session will focus on: - The full Zero Trust reference architecture and steps to get there -...
Taking Control of Your Complex Security Policy Across Hybrid and Multi-Cloud Env

As the network estate grows in size and complexity, the enterprise security team is responsible for ensuring a unified, comprehensive network security policy. But how can the team be sure about application connectivity and the correct implementation of change requests when applications span the breadth of on-premise, private and multi-cloud environments, each with its own security controls? In the face...
Ready for Liftoff? Planning a Safe and Secure Cloud Migration

Want to transition on-premises workloads to the cloud, but are concerned about consistently securing access? Join us for a webinar where we discuss how you can easily and effectively apply secure access policies throughout your cloud migration, regardless of your infrastructure complexity or architectural starting point. By utilizing a modern, cloud-ready security architecture, you can maintain – and in fact,...
Using Machine Learning to Detect Command Line Anomalies

As we all know, cybersecurity is often a game of cat and mouse - attackers are always trying to outsmart us defenders. At Adobe, we face the same issues and concerns as all the other major companies. We must ask ourselves simple questions with non-simple answers: How do we ensure that all assets are protected? How do we ensure that...