Vår oppgave

Å fremme god praksis for å sikre skytjenester, og gi opplæring i bruk av skytjenester for å sikre alle andre former for databehandling.

CCSK sertifiseringskurs på Sikkerhetsfestivalen 2019

Som på Høstkonferansen i fjor kjører CSA Sertifiseringskurs Certificate of Cloud Security Knowledge (CCSK) på Sikkerhetsfestivalen 2019, onsdag 28. august. Påmelding...

Nyvalgt styre 2019-2020 for Cloud Security Alliance Norway Chapter

Det ble 14. februar avholdt årsmøtet i Cloud Security Alliance Norway Chapter. Vi presenterer med dette det nye styret for 2019-2020! Styreleder: Eirik Gulbrandsen, Arrow (2020) Styremedlem: Gøran Tømte, Data Equipment (2020)Styremedlem: Hanne Wesselsen, Devoteam...

EY Norwegian Cloud Maturity Survey 2019

Bruk av skytjenester i Norge øker - men kompetansebehovet er stort og kompleksitet knyttet til migreringsprosjekter holder bruken tilbake. Det en åpenbar trend at driverene for å ta i bruk skytjenester ikke lenger er kostnadsreduksjon, men time-to-market og ønsket om...

Mapping of On-Premises Security Controls vs Major Cloud Providers Version 3.2 Feb 2019

"Mapping of On-Premises Security Controls vs Major Cloud Providers" foreligger nå i versjon 3.2 og er i tillegg til AWS, Azure og Google nå oppdatert til å inkludere Oracle, IBM og Alibaba - samtlige relevante skyleverandører for norske organisasjoner. Forfatteren av...

Samarbeidspartnere

Bedriftsmedlemmer

CCSK sertifiseringskurs på Sikkerhetsfestivalen 2019

11. Jun 2019

Som på Høstkonferansen i fjor kjører CSA Sertifiseringskurs Certificate of Cloud Security Knowledge (CCSK) på Sikkerhetsfestivalen 2019, onsdag 28. august. Påmelding...

Nyvalgt styre 2019-2020 for Cloud Security Alliance Norway Chapter

15. Feb 2019

EY Norwegian Cloud Maturity Survey 2019

14. Feb 2019

Mapping of On-Premises Security Controls vs Major Cloud Providers Version 3.2 Feb 2019

12. Feb 2019

Årsmøte 2019 Cloud Security Alliance Norway

1. Feb 2019

Årsmøte i Cloud Security Alliance Norway torsdag 14. februar 16:00 @ Radisson Blu Scandinavia Hotel (rett etter at Informasjonssikkerhetssporet på konferansen Software 2019 er ferdig - https://event.dnd.no/software/foredragsholdere/informasjonssikkerhet/) 1....

AWS etablerer kontor i Norge

31. Jan 2019

(og ikke fysiske datasentre tross initiell feilaktig påstand på NRK.no). Sak fra DN; Amerikansk it-gigant vil «overta» Norge Med kunder som DNB, Tine, XXL, NSB og Visma + "titusenvis" i Norden skulle det kommersielle grunnlaget være tilstede. DnB flyttet nylig hele...

Medlemsmøte 6. februar 2019 – m/ “Amundsen” førpremiere!

11. Jan 2019

Cloud Security Alliance Norway inviterer til et medlemsmøte litt utenom det vanlige onsdag 6. februar 2019 på Vika kino! Tema er "Ekspedisjon til skya" og er et seminar i samarbeid med Arrow, Microsoft, Veritas og opplevelsesselskapet Yourway. Som en del av opplegget...

Sikkerhetsfestivalen 2019 – Call for Presentations

8. Jan 2019

I august 2019 skjer det noe ekstra spennende innenfor sikkerhetsmiljøet i Norge; Sikkerhetsfestivalen 2019 - på Lillehammer 26-28. august 2019! For dere som kjenner den tradisjonelle "ISF Høstkonferansen" i regi av ISF Norge, så har ISF for sitt 25 års jubileum...

Typiske utfordringer knyttet til forståelsen av CCSK og CCSP

5. Dec 2018

Stadig flere innen IT - og IT-sikkerhet - har behov for å forholde seg til sikkerhetsproblemstillinger knyttet til bruken av skytjenester. To populære sertifiseringer i denne sammenhengen er Certificate of Cloud Security Knowledge (CCSK), i regi av Cloud Security...

Blockchain, personvern, risikovurdering og tilgangskontroll – i skya!

14. Oct 2018

Cloud Security Alliance Norway inviterer til medlemsmøte 31. oktober på Teknologihuset! Vi ønsker velkommen til en spennende kveld, uansett om du er opptatt av GDPR, risikovurdering, tilgangskontroll til skytjenester eller blockchain – alt relatert til sky og...

Will Hybrid Cryptography Protect Us from the Quantum Threat?

By Roberta Faux, Director of Advance Cryptography, BlackHorse Solutions Our new white paper explains the pros and cons of hybrid cryptography. The CSA Quantum-Safe Security Working Group has produced a new primer on hybrid cryptography. This paper, “Mitigating the Quantum Threat with Hybrid Cryptography,” is aimed at helping non-technical corporate executives understand how to potentially […] The post Will Hybrid Cryptography...
What Will Happen If Encryption Used to Protect Data in Corporations Can Be Broken?

By Edward Chiu, Emerging Cybersecurity Technologist, Chevron While the development of quantum computers is still at a nascent stage, its potential in solving problems not feasible with classical computers draws interest from many industries. On one hand, Volkswagen is researching using quantum computers to help optimize traffic, and researchers at Roche are investigating the use […] The post What Will Happen...
CSA Issues Top 20 Critical Controls for Cloud Enterprise Resource Planning Customers

By Victor Chin, Research Analyst, Cloud Security Alliance Cloud technologies are being increasingly adopted by organizations, regardless of their size, location or industry. And it’s no different when it comes to business-critical applications, typically known as enterprise resource planning (ERP) applications. Most organizations are migrating business-critical applications to a hybrid architecture of ERP applications. To […] The post CSA Issues Top...
Security Spotlight: G Suite User Passwords Stored in Plaintext

By Will Houcheime, Product Marketing Manager, Bitglass Here are the top cybersecurity stories of recent weeks: G Suite User Passwords Stored in Plaintext Since 2005 Contact Data of Millions of Instagram Influencers Exposed Rogue Iframe Phishing Used to Steal Payment Card Information London Commuters to be Tracked Through the Use of Wi-Fi Hotspots Thousands of […] The post Security Spotlight: G...
Roadmap to Earning Your Certificate in Cloud Security Knowledge (CCSK)

By Ryan Bergsma, Training Program Director, Cloud Security Alliance In this blog we’ll be taking a look at how to earn your Certificate of Cloud Security Knowledge (CCSK), from study materials, to how to prepare, to the details of the exam, including a module breakdown, passing rates, format etc. If you’re considering earning your CCSK, […] The post Roadmap to Earning...
Happy Birthday GDPR! – Defending Against Illegitimate Complaints

By John DiMaria; CSSBB, HISP, MHISP, AMBCI, CERP, Assurance Investigatory Fellow – Cloud Security Alliance On May 25th we will celebrate the first birthday of GDPR. Yes, one year ago GDPR was sort of a four-letter word (or acronym if you will). People were in a panic of how they were going to comply and […] The post Happy Birthday GDPR!...
New and Unique Security Challenges in Native Cloud, Hybrid and Multi-cloud Environments

By Hillary Baron, Research Analyst, Cloud Security Alliance CSA’s latest survey, Cloud Security Complexity: Challenges in Managing Security in Hybrid and Multi-Cloud Environments, examines information security concerns in a complex cloud environment. Commissioned by AlgoSec, the survey of 700 IT and security professionals aims to analyze and better understand the state of adoption and security […] The post New and Unique...
Financial Services: Counting on CASBs

By Will Houcheime, Product Marketing Manager, Bitglass Financial institutions handle a great deal of sensitive data and are highly conscientious of where they store and process it. Nevertheless, they are aware of the many benefits that they can gain by using cloud applications. In order to embrace the cloud’s myriad advantages without compromising the security […] The post Financial Services: Counting...

Accelerating Your Journey to Zero Trust

Zero Trust is trending. Every expo show floor is inundated with this concept that promises to transform of corporate security from a well-known failed perimeter-centric model. In this session, we will discuss what is Zero Trust, why are enterprises adopting it to fix some of security’s biggest challenges and how to get started.
Does WebAuthn Signal the End of Passwords for Browsers?

Passwords have been the de-facto standard for authentication in the last 40 years, but end users hate them. Not to mention they aren't considered safe anymore - 81% of hacking-related account breaches leveraged weak or stolen passwords. While password + 2FA is a recommended approach by NIST, 2FA may still be hackable. WebAuthn promises a safer, phishing-resistant protocol and easier...
The Nexus of Organized Cyber Crime and Cyber Terrorism

New Services and Tools for Supporting First-line-practitioners and Law Enforcement Agencies. In recent years, Europe has been at increased risk of extremist violence and terrorism – from Islamic fundamentalists, far-right fascist hate groups and others, fueled by online radicalization and encrypted communication networks. At the same time, national and international law enforcement agencies are battling growing networks of organized criminals that...
2019 Trends Report: The Zero Trust Journey

As your workforce becomes more distributed, security is even more critical. Protecting the network is important but it’s no longer enough to secure applications and data. That’s why adoption of a Zero Trust security framework is on the rise. Interested in more data on how your peers are adopting Zero Trust to protect their apps, data and distributed workforce? Join our...
5 Steps to Protecting Your Data in Today's Cloud- and Mobile-First World

The rapid adoption of cloud and mobile in the enterprise is powering the transformation of legacy IT systems to more modern technology and processes. The business benefits of speed and agility for the enterprise can’t be denied, but the challenge is that security is often not considered a part of this digital transformation. The result is new blind spots are...
Securing Cloud Infrastructure with Cyber Exposure

Cloud is dramatically expanding your attack surface and introducing new visibility challenges into infrastructure security. Without foundational visibility, it’s nearly impossible to execute other cloud security programs supporting compliance, policy enforcement, and vulnerability remediation. Cyber Exposure is a cybersecurity discipline to provide visibility into traditional IT and cloud infrastructure to help you manage and measure cyber risk. Cyber Exposure allows...
CSA Study: Cloud Security Complexity

Cloud computing provides improved security, agility and flexibility. However, integrating this new service into legacy IT environments comes with great concern. The Cloud Security Alliance has recently surveyed over 700 IT and network security professionals from around the globe on security challenges in cloud environments. In this research, security, data loss and compliance were identified as the top 3 concerns when...
Embracing the Kanyes: Fostering a Security Culture that Accepts Human Error

It's easy blame employees for poor password and email hygiene, but in reality, human error isn't going to go away. Every organization will always have a "Kanye" with poor operational security and weak passwords. IT and Security teams have to acknowledge the “desire paths” across the security landscape, and ensure that we not only keep up, but facilitate ease of...