Vår oppgave

Å fremme god praksis for å sikre skytjenester, og gi opplæring i bruk av skytjenester for å sikre alle andre former for databehandling.

CCSK sertifiseringskurs på Sikkerhetsfestivalen 2019

Som på Høstkonferansen i fjor kjører CSA Sertifiseringskurs Certificate of Cloud Security Knowledge (CCSK) på Sikkerhetsfestivalen 2019, onsdag 28. august. Påmelding...

Nyvalgt styre 2019-2020 for Cloud Security Alliance Norway Chapter

Det ble 14. februar avholdt årsmøtet i Cloud Security Alliance Norway Chapter. Vi presenterer med dette det nye styret for 2019-2020! Styreleder: Eirik Gulbrandsen, Arrow (2020) Styremedlem: Gøran Tømte, Data Equipment (2020)Styremedlem: Hanne Wesselsen, Devoteam...

EY Norwegian Cloud Maturity Survey 2019

Bruk av skytjenester i Norge øker - men kompetansebehovet er stort og kompleksitet knyttet til migreringsprosjekter holder bruken tilbake. Det en åpenbar trend at driverene for å ta i bruk skytjenester ikke lenger er kostnadsreduksjon, men time-to-market og ønsket om...

Mapping of On-Premises Security Controls vs Major Cloud Providers Version 3.2 Feb 2019

"Mapping of On-Premises Security Controls vs Major Cloud Providers" foreligger nå i versjon 3.2 og er i tillegg til AWS, Azure og Google nå oppdatert til å inkludere Oracle, IBM og Alibaba - samtlige relevante skyleverandører for norske organisasjoner. Forfatteren av...

Samarbeidspartnere

Bedriftsmedlemmer

CCSK sertifiseringskurs på Sikkerhetsfestivalen 2019

11. Jun 2019

Som på Høstkonferansen i fjor kjører CSA Sertifiseringskurs Certificate of Cloud Security Knowledge (CCSK) på Sikkerhetsfestivalen 2019, onsdag 28. august. Påmelding...

Nyvalgt styre 2019-2020 for Cloud Security Alliance Norway Chapter

15. Feb 2019

EY Norwegian Cloud Maturity Survey 2019

14. Feb 2019

Mapping of On-Premises Security Controls vs Major Cloud Providers Version 3.2 Feb 2019

12. Feb 2019

Årsmøte 2019 Cloud Security Alliance Norway

1. Feb 2019

Årsmøte i Cloud Security Alliance Norway torsdag 14. februar 16:00 @ Radisson Blu Scandinavia Hotel (rett etter at Informasjonssikkerhetssporet på konferansen Software 2019 er ferdig - https://event.dnd.no/software/foredragsholdere/informasjonssikkerhet/) 1....

AWS etablerer kontor i Norge

31. Jan 2019

(og ikke fysiske datasentre tross initiell feilaktig påstand på NRK.no). Sak fra DN; Amerikansk it-gigant vil «overta» Norge Med kunder som DNB, Tine, XXL, NSB og Visma + "titusenvis" i Norden skulle det kommersielle grunnlaget være tilstede. DnB flyttet nylig hele...

Medlemsmøte 6. februar 2019 – m/ “Amundsen” førpremiere!

11. Jan 2019

Cloud Security Alliance Norway inviterer til et medlemsmøte litt utenom det vanlige onsdag 6. februar 2019 på Vika kino! Tema er "Ekspedisjon til skya" og er et seminar i samarbeid med Arrow, Microsoft, Veritas og opplevelsesselskapet Yourway. Som en del av opplegget...

Sikkerhetsfestivalen 2019 – Call for Presentations

8. Jan 2019

I august 2019 skjer det noe ekstra spennende innenfor sikkerhetsmiljøet i Norge; Sikkerhetsfestivalen 2019 - på Lillehammer 26-28. august 2019! For dere som kjenner den tradisjonelle "ISF Høstkonferansen" i regi av ISF Norge, så har ISF for sitt 25 års jubileum...

Typiske utfordringer knyttet til forståelsen av CCSK og CCSP

5. Dec 2018

Stadig flere innen IT - og IT-sikkerhet - har behov for å forholde seg til sikkerhetsproblemstillinger knyttet til bruken av skytjenester. To populære sertifiseringer i denne sammenhengen er Certificate of Cloud Security Knowledge (CCSK), i regi av Cloud Security...

Blockchain, personvern, risikovurdering og tilgangskontroll – i skya!

14. Oct 2018

Cloud Security Alliance Norway inviterer til medlemsmøte 31. oktober på Teknologihuset! Vi ønsker velkommen til en spennende kveld, uansett om du er opptatt av GDPR, risikovurdering, tilgangskontroll til skytjenester eller blockchain – alt relatert til sky og...

Egregious 11 Meta-Analysis Part 1: (In)sufficient Due Diligence and Cloud Security Architecture and Strategy

By Victor Chin, Research Analyst, CSA On August 6th, 2019, the CSA Top Threats working group released the third iteration of the Top Threats to Cloud Computing report. The following security issues from the previous iteration (“The Treacherous Twelve”) appeared again in the latest report. Data Breaches Account Hijacking Insider Threats Insecure Interfaces and APIs […] The post Egregious 11 Meta-Analysis...
Cloud Security Alliance’s D.C. Metro Area Chapter announces the event of the year: the Cybersecurity Cruise!

By: Anil Karmel, President, CSA-DC Chapter & Co-Founder and CEO of C2 Labs, Inc. About a year ago, CSA recognized the need to establish a local chapter serving the unique needs of the Washington D.C. Metro Area. It’s been my honor and privilege to serve as the President of this new Chapter alongside a distinguished […] The post Cloud Security Alliance’s...
Challenges & Best Practices in Securing Application Containers and Microservices

By Anil Karmel, Co-Chair, CSA Application Containers and Microservices (ACM) Working Group Application Containers have a long and storied history, dating back to the early 1960s with virtualization on mainframes up to the 2000s with the release of Solaris and Linux Containers (LXC). The rise of Docker in the early 2010s elevated the significance of Application […] The post Challenges & Best...
CCM v3.0.1. Update for AICPA, NIST and FedRAMP Mappings

Victor Chin and Lefteris Skoutaris, Research Analysts, CSA The CSA Cloud Controls Matrix (CCM) Working Group is glad to announce the new update to the CCM v3.0.1. This minor update will incorporate the following mappings: Association of International Certified Professional Accountants (AICPA) Trust Services Criteria (TSC) 2017 National Institute of Standards and Technology (NIST) 800-53 […] The post CCM v3.0.1. Update...
A Technical Analysis of the Capital One Cloud Misconfiguration Breach

This article was originally published on Fugue's blog here. By Josh Stella, Co-founder & Chief Technology Officer, Fugue This is a technical exploration of how the Capital One breach might have occurred, based on the evidence we have from the criminal complaint. I want to start by saying that I deeply respect the Capital One cloud team, […] The post A Technical Analysis...
Uncovering the CSA Top Threats to Cloud Computing with Jim Reavis

By Greg Jensen, Sr. Principal Director – Security Cloud Business Group, Oracle For the few that attend this year’s BlackHat conference kicking off this week in Las Vegas, many will walk away with an in depth understanding and knowledge on risk as well as actionable understandings on how they can work to implement new strategies to defend against […] The post Uncovering the CSA...
The Cloud in the Fight Against Cyber-Bullying

By the Cybersecurity International Institute (CSI) Learn about the upcoming innovative social project on Cyber-bullying using a cloud platform. The CSI Institute (Cybersecurity International Institute) is a non-governmental and not-for-profit organization. Our goal is to contribute to the information, education, and, overall practical awareness of citizens in new technologies, online safety, and cybersecurity issues. In […] The post The Cloud in...
Facebook Project Libra – the good, the bad, the ugly and why you should care

From the Seifried Files By Kurt Seifried, Chief Blockchain Officer, CSA So you’ve probably heard by now that Facebook will be creating a crypto-currency called “Project Libra” and if you haven’t well, now you know. So first let’s cover what is good about this. Facebook has announced Project Libra as a Stablecoin, its value will […] The post Facebook Project Libra...

Quandaries and Clouds: A Discussion on Cloud Security

Are you experiencing these common challenges in your cloud security program? There is no question that the way we work has changed with the rise of cloud and the widespread access to mobile devices. This shift in how we work requires us to also shift how we think about security when it comes to the cloud. Listen in as our panel...
Protect Your Web Applications from Component Vulnerabilities

Web applications are becoming increasingly complex, with most applications now built using multiple layered components, such as web servers, web frameworks, language engines and JavaScript libraries. The growing number of cyber attacks stemming from component vulnerabilities highlights a limitation of conventional scanning for securing web applications. Join Tenable experts to learn how you can go beyond traditional scanning to better...
5 Identity Attacks that Exploit Your Broken Authentication

It’s no secret that today’s hackers are smarter than ever before - a motivated hacker can use a variety of different methods to steal passwords from unsuspecting users. While two-factor authentication solutions have been around for a while, they're no longer comprehensive enough to defend the new perimeter. Join us to learn the anatomy of common identity attacks, and how...
Application of Security Ratings for Emerging Regulatory Compliance Trend in APAC

This session will explore the emerging regulatory trends in Vendor Risk Management in APAC and demonstrate how Security Ratings can play a key role in supporting enterprises in the establishment of strong governance and compliance oversight for their vendor landscape. The session will use a case study based approach and share with you how security ratings work, how to apply...
Achieving Cloud Visibility With Cloud-First Network Detection & Response

Without native network visibility in the cloud, enterprises have been limited to log or agent centric tools to support their cloud migration and to secure their workloads, making it challenging to detect and investigate complex threats in a timely manner. The introduction of Microsoft Azure V-Tap and Amazon VPC Traffic Mirroring finally provides access to context-rich network data for threat...
Gaining Decrypted Visibility in Public Cloud with Amazon VPC Traffic Mirroring

Encryption of all traffic in the cloud is a widely adopted best practice. The new TLS 1.3 standard with Elliptic-Curve Diffie Helman (ECDH), perfect forward secrecy and ephemeral keys renders most traditional decryption methods ineffective and out-of-band decryption essentially impossible. Combined with the distributed and elastic nature of cloud computer architectures and the use of third party services, enterprises have...
How Machine Learning is Taking Cyber Security Teams to the Next Level

Ten years ago, security leaders couldn’t wait to tell you about their cutting edge use of Linux – nowadays, that’s considered table stakes. Today, the big buzzwords are AI and machine learning – and for good reason. With the computational power we have today, we can apply straightforward math tricks to data and surface insights that are not only interesting...
Best Practices for Securely Moving Workloads Into the Cloud

Organizations are increasingly moving their workloads to the cloud to achieve greater agility, flexibility, and cost savings. In fact, spending on cloud infrastructure services will grow from $39.5 billion in 2019 to $63 billion through 2021 [according to Gartner]. However, when transitioning to the cloud, it’s critical to understand that cloud security is a shared responsibility between the cloud service provider...