Vår oppgave

Å fremme god praksis for å sikre skytjenester, og gi opplæring i bruk av skytjenester for å sikre alle andre former for databehandling.

Typiske utfordringer knyttet til forståelsen av CCSK og CCSP

Stadig flere innen IT - og IT-sikkerhet - har behov for å forholde seg til sikkerhetsproblemstillinger knyttet til bruken av skytjenester. To populære sertifiseringer i denne sammenhengen er Certificate of Cloud Security Knowledge (CCSK), i regi av Cloud Security...

Blockchain, personvern, risikovurdering og tilgangskontroll – i skya!

Cloud Security Alliance Norway inviterer til medlemsmøte 31. oktober på Teknologihuset! Vi ønsker velkommen til en spennende kveld, uansett om du er opptatt av GDPR, risikovurdering, tilgangskontroll til skytjenester eller blockchain – alt relatert til sky og...

Cloud Security Alliance etablerer nytt europeisk hovedkvarter i Berlin

Samtidig opprettes det også et "GDPR Center of Excellence" med fokus på personvern og personvernlovgivning spesielt knyttet til skytjenester. Cloud Security Alliance (CSA) er en organisasjon med over 90 000 medlemmer på verdensbasis, dedikert til å definere og øke...

De vanligste sikkerhetsfeilene i AWS S3

S3 er blant de eldste tjenestene på AWS og også blant de mest brukte for å lagre store mengder data - fra privatpersoner til noen av verdens største selskapene. Sikkerhetsfunksjonene er omfattende og mangfoldige - såpass mangfoldige at det kan være lett å miste...

Samarbeidspartnere

Bedriftsmedlemmer

Typiske utfordringer knyttet til forståelsen av CCSK og CCSP

5. Dec 2018

Blockchain, personvern, risikovurdering og tilgangskontroll – i skya!

14. Oct 2018

Cloud Security Alliance etablerer nytt europeisk hovedkvarter i Berlin

27. Sep 2018

De vanligste sikkerhetsfeilene i AWS S3

10. Sep 2018

US CLOUD Act øker bruken av kryptering

7. Sep 2018

Clarifying Lawful Overseas Use of Data (CLOUD) Act ble i all stillhet vedtatt som lov i USA 23. mars 2018. Den gjør det kort fortalt mye enklere for amerikanske myndigheter å be om utlevering av data fra amerikanske tjenesteleverandører - uansett om tjenesten fysisk...

CCSK workshop med 36 deltakere på ISF Høstkonferansen!

28. Aug 2018

Mandag 27. august gjennomførte Cloud Security Alliance Norway (CSAN) en CCSK workshop med 36 deltagere(!) som en del av programmet på ISF Høstkonferansen CCSK - Certificate of Cloud Security Knowledge - workshop er en del av et større opplegg med elæringskomponenter,...

Devoteam og Basefarm inn som sponsorer av Cloud Security Alliance Norway

25. Aug 2018

Cloud Security Alliance Norway ønsker Devoteam Fornebu Consulting og Basefarm velkommen som sponsorer for 2018 og 2019! Cloud Security Alliance (CSA) er en organisasjon med over 80 000 medlemmer på verdensbasis dedikert til å definere og øke bevisstheten rundt god...

Top Threats to Cloud Computing: Deep Dive

25. Aug 2018

Denne casestudien forsøker å konkretisere sikkerhetsanalyse ved å ved å bruke ni anekdoter sitert i "Top Threats"-grunnlaget. Hver av de ni eksemplene presenteres i form av (1) et referansediagram og (2) en detaljert fortelling. Referansediagrammets beskriver...

CSA Code of Conduct for GDPR Compliance

20. Aug 2018

Hva er CSAs retningslinjer for GDPR? Uansett om du er bedriftens personvernombud eller selv er en leverandør av skytjenester, gir CSA Code of Conduct for GDPR Compliance et konsekvent og omfattende rammeverk for å overholde EUs GDPR lovverk. Code of Conduct for GDPR...

Addressing the Skills Gap in Cloud Security Professionals

By Ryan Bergsma, Training Program Director, CSA One of the math lessons that has always stuck with me from childhood is that if you took a penny and doubled it every day for a month, it would make you a millionaire. In fact, it wouldn’t even take the whole month, you would be a millionaire on […] The post Addressing the Skills...
Keeping Your Boat Afloat with a Cloud Access Security Broker

By Prasidh Srikanth, Senior Product Manager, Bitglass If you were on a sinking ship that was full of holes of various sizes, which ones would you patch first? Probably the big ones. Now, consider this: As an enterprise, you’ve been successfully sailing and securing your corporate data on premises for some time. However, now you’re migrating […] The post Keeping Your Boat...
Development of Cloud Security Guidance, with Mapping MY PDPA Standard to CCM Control Domains, Jointly Developed by MDEC and CSA

By Ekta Mishra, Research Analyst/APAC, Cloud Security Alliance The Cloud Security Alliance Cloud Controls Matrix (CCM) provides a controls framework that gives detailed understanding of security concepts and principles that are aligned to the Cloud Security Alliance guidance in 13 domains. The foundations of the CSA CCM rest on its customized relationship to other industry-accepted […] The post Development of Cloud...
Documentation of Distributed Ledger Technology and Blockchain Use

By Ashish Mehta, Co-chair, CSA Blockchain/Distributed Ledger Working Group CSA’s newest white paper, Beyond Cryptocurrency: Nine Relevant Blockchain and Distributed Ledger Technology (DLT) Use Cases, aims to identify wider use cases for both technologies beyond just cryptocurrency, an area with which both technologies currently have the widest association. In the process of outlining several use […] The post Documentation of Distributed...
OneTrust and Cloud Security Alliance Partner to Launch Free Vendor Risk Tool for CSA Members

By Gabrielle Ferree, Public Relations and Marketing Manager, OneTrust OneTrust is excited to announce that we have partnered with Cloud Security Alliance to launch a free Vendor Risk Management (VRM) tool. The tool, available to CSA members today, automates the vendor risk lifecycle for compliance with the GDPR, CCPA and other global privacy frameworks. Get started […] The post OneTrust and Cloud...
Typical Challenges in Understanding CCSK and CCSP: Technology Architecture

By Peter HJ van Eijk, Head Coach and Cloud Architect, ClubCloudComputing.com As cloud computing is becoming increasingly mainstream, more people are seeking cloud computing security certification. Because I teach prep courses for the two most popular certifications—the Certificate of Cloud Security Knowledge (CCSK), organized by the Cloud Security Alliance (CSA), and the Certified Cloud Security […] The post Typical Challenges in...
Bitglass Security Spotlight: US Government Breaches Abound

By Jacob Serpa, Product Manager, Bitglass Here are the top cybersecurity headlines of recent weeks: —Healthcare.gov breached —US weapons systems contain cybersecurity gaps —Over 35 million US voter records for sale —National Guard faces ransomware attack Healthcare.gov breached 75,000 people had their personal details stolen when hackers breached a government system that is frequently used […] The post Bitglass Security Spotlight:...
Cloud Threat Report: Emotet, Dridex, Mylobot Malware Activity – Week of 11/26

By Curtis Jordan, Lead Security Engineer, TruSTAR In TruSTAR, we see that Emotet has been on the rise, particularly over the last two weeks. Also, because of crossover with Dridex C&C servers, we’re seeing an increase in Dridex activity as well. Another piece of malware to be on the lookout for is Mylobot. Mylobot is a highly sophisticated […] The post Cloud Threat Report:...

Container Security Best Practices: A How-To Discussion

Application containers like Docker help DevOps work faster and quicken time-to-market, but they also create a major Cyber Exposure gap. Traditional vulnerability management approaches can’t easily secure containers – let alone keep pace with the high-velocity world of DevOps and continuous innovation. But don’t despair. We’ve got just the thing to save you from this nightmarish ordeal. Join us as...
2018: The Year in Data Security Panel Discussion

The data security world changes so quickly it can be hard to keep up with the latest threats to corporate data. With countless stories of breaches, phishing scams, insider threats, government whistleblowers and cyber warfare, 2018 was the year all eyes turned to security teams and their role within an organization. In this webinar, a panel of security experts will...
2018 Data Exposure Report

Are your C-suiters putting valuable company IP at risk through careless data practices? If they're like most business leaders, they are. Nearly three-quarters of CEOs admit they’ve taken IP, ideas, and data from a former employer, and 95 percent admit to keeping a copy of their work on a personal device. A new report from Code42 and Sapio Research raises startling...
Zero Trust in Practice: Why Identity Drives Next-Gen Access

Zero Trust is quickly becoming the dominant security model for the cloud, shifting the perimeter from the network to the people and devices that make up a modern workforce. As a model with many moving parts, the immediate question is where to start? This session will focus on: - The full Zero Trust reference architecture and steps to get there -...
Taking Control of Your Complex Security Policy Across Hybrid and Multi-Cloud Env

As the network estate grows in size and complexity, the enterprise security team is responsible for ensuring a unified, comprehensive network security policy. But how can the team be sure about application connectivity and the correct implementation of change requests when applications span the breadth of on-premise, private and multi-cloud environments, each with its own security controls? In the face...
Ready for Liftoff? Planning a Safe and Secure Cloud Migration

Want to transition on-premises workloads to the cloud, but are concerned about consistently securing access? Join us for a webinar where we discuss how you can easily and effectively apply secure access policies throughout your cloud migration, regardless of your infrastructure complexity or architectural starting point. By utilizing a modern, cloud-ready security architecture, you can maintain – and in fact,...
Using Machine Learning to Detect Command Line Anomalies

As we all know, cybersecurity is often a game of cat and mouse - attackers are always trying to outsmart us defenders. At Adobe, we face the same issues and concerns as all the other major companies. We must ask ourselves simple questions with non-simple answers: How do we ensure that all assets are protected? How do we ensure that...
Protecting What’s Left: Cloud Security in the Serverless Age

Serverless architectures and FaaS services such as AWS Lambda make application development scalable, easy, and cheap. Plus, there’s no server to maintain or patch! But just because there’s no server doesn't mean there’s nothing to secure. Serverless services and their dependencies still need to be used and configured correctly, which is why it’s important to maintain security visibility into your...