Vår oppgave

Å fremme god praksis for å sikre skytjenester, og gi opplæring i bruk av skytjenester for å sikre alle andre former for databehandling.

Nyvalgt styre 2019-2020 for Cloud Security Alliance Norway Chapter

Det ble 14. februar avholdt årsmøtet i Cloud Security Alliance Norway Chapter. Vi presenterer med dette det nye styret for 2019-2020! Styreleder: Eirik Gulbrandsen, Arrow (2020) Styremedlem: Gøran Tømte, Data Equipment (2020)Styremedlem: Hanne Wesselsen, Devoteam...

EY Norwegian Cloud Maturity Survey 2019

Bruk av skytjenester i Norge øker - men kompetansebehovet er stort og kompleksitet knyttet til migreringsprosjekter holder bruken tilbake. Det en åpenbar trend at driverene for å ta i bruk skytjenester ikke lenger er kostnadsreduksjon, men time-to-market og ønsket om...

Mapping of On-Premises Security Controls vs Major Cloud Providers Version 3.2 Feb 2019

"Mapping of On-Premises Security Controls vs Major Cloud Providers" foreligger nå i versjon 3.2 og er i tillegg til AWS, Azure og Google nå oppdatert til å inkludere Oracle, IBM og Alibaba - samtlige relevante skyleverandører for norske organisasjoner. Forfatteren av...

Årsmøte 2019 Cloud Security Alliance Norway

Årsmøte i Cloud Security Alliance Norway torsdag 14. februar 16:00 @ Radisson Blu Scandinavia Hotel (rett etter at Informasjonssikkerhetssporet på konferansen Software 2019 er ferdig - https://event.dnd.no/software/foredragsholdere/informasjonssikkerhet/) 1....

Samarbeidspartnere

Bedriftsmedlemmer

Nyvalgt styre 2019-2020 for Cloud Security Alliance Norway Chapter

15. Feb 2019

EY Norwegian Cloud Maturity Survey 2019

14. Feb 2019

Mapping of On-Premises Security Controls vs Major Cloud Providers Version 3.2 Feb 2019

12. Feb 2019

Årsmøte 2019 Cloud Security Alliance Norway

1. Feb 2019

AWS etablerer kontor i Norge

31. Jan 2019

(og ikke fysiske datasentre tross initiell feilaktig påstand på NRK.no). Sak fra DN; Amerikansk it-gigant vil «overta» Norge Med kunder som DNB, Tine, XXL, NSB og Visma + "titusenvis" i Norden skulle det kommersielle grunnlaget være tilstede. DnB flyttet nylig hele...

Medlemsmøte 6. februar 2019 – m/ “Amundsen” førpremiere!

11. Jan 2019

Cloud Security Alliance Norway inviterer til et medlemsmøte litt utenom det vanlige onsdag 6. februar 2019 på Vika kino! Tema er "Ekspedisjon til skya" og er et seminar i samarbeid med Arrow, Microsoft, Veritas og opplevelsesselskapet Yourway. Som en del av opplegget...

Sikkerhetsfestivalen 2019 – Call for Presentations

8. Jan 2019

I august 2019 skjer det noe ekstra spennende innenfor sikkerhetsmiljøet i Norge; Sikkerhetsfestivalen 2019 - på Lillehammer 26-28. august 2019! For dere som kjenner den tradisjonelle "ISF Høstkonferansen" i regi av ISF Norge, så har ISF for sitt 25 års jubileum...

Typiske utfordringer knyttet til forståelsen av CCSK og CCSP

5. Dec 2018

Stadig flere innen IT - og IT-sikkerhet - har behov for å forholde seg til sikkerhetsproblemstillinger knyttet til bruken av skytjenester. To populære sertifiseringer i denne sammenhengen er Certificate of Cloud Security Knowledge (CCSK), i regi av Cloud Security...

Blockchain, personvern, risikovurdering og tilgangskontroll – i skya!

14. Oct 2018

Cloud Security Alliance Norway inviterer til medlemsmøte 31. oktober på Teknologihuset! Vi ønsker velkommen til en spennende kveld, uansett om du er opptatt av GDPR, risikovurdering, tilgangskontroll til skytjenester eller blockchain – alt relatert til sky og...

Cloud Security Alliance etablerer nytt europeisk hovedkvarter i Berlin

27. Sep 2018

Samtidig opprettes det også et "GDPR Center of Excellence" med fokus på personvern og personvernlovgivning spesielt knyttet til skytjenester. Cloud Security Alliance (CSA) er en organisasjon med over 90 000 medlemmer på verdensbasis, dedikert til å definere og øke...

The Many Benefits of a Cloud Access Security Broker

By Will Houcheime, Product Marketing Manager, Bitglass Today, organizations are finding that storing and processing their data in the cloud brings countless benefits. However, without the right tools (such as cloud access security brokers (CASBs), they can put themselves at risk. Organizations’ IT departments understand how vital cybersecurity is, but must be equipped with modern tools […] The post The Many Benefits...
CCSK Success Stories: From a Data Privacy Consultant

By the CSA Education Team This is the fourth part in a blog series on cloud security training, in which we will be interviewing Satishkumar Tadapalli a certified and seasoned information security and data privacy consultant. Tadapalli has 12+ years of multi-functional IT experience in pre-sales, consulting, risk advisory and business analysis. He has rich […] The post CCSK Success Stories:...
CSA STAR – The Answer to Less Complexity, Higher Level of Compliance, Data Governance, Reduced Risk and More Cost-Effective Management of Your Security and Privacy System

By John DiMaria, Assurance Investigatory Fellow, Cloud Security Alliance We just launched a major refresh of the CSA STAR (Security, Trust and Assurance Risk) program, and if you were at the CSA Summit at RSA, you got preview of what’s in store. So let me put things in a bit more context regarding the evolution […] The post CSA STAR –...
Continuous Auditing – STAR Continuous – Increasing Trust and Integrity

By John DiMaria, Assurance Investigatory Fellow, Cloud Security Alliance As a SixSigma Black Belt I was brought up over the years with the philosophy of continual monitoring and improvement, moving from a reactive state to a preventive state. Actually, I wrote a white paper a couple of years ago on how SixSigma is applied to […] The post Continuous Auditing –...
Prying Eyes Inside the Enterprise: Bitglass’ Insider Threat Report

By Jacob Serpa, Product Marketing Manager, Bitglass When words like cyberattack are used, they typically conjure up images of malicious, external threats. While hackers, malware, and other outside entities pose a risk to enterprise security, they are not the only threats that need to be remediated. Insider threats, which involve either malicious or careless insiders, are another significant […] The post Prying Eyes Inside...
Healthcare Breaches and the Rise of Hacking and IT Incidents

By Jacob Serpa, Product Marketing Manager, Bitglass In the course of their day-to-day operations, healthcare organizations handle an extensive amount of highly sensitive data. From Social Security numbers to medical record numbers and beyond, it is imperative that these personal details are properly secured. Each year, Bitglass conducts an analysis and uncovers how well healthcare organizations are […] The post Healthcare Breaches and...
12 Ways Cloud Upended IT Security (And What You Can Do About It)

By Andrew Wright, Co-founder & Vice President of Communications, Fugue The cloud represents the most disruptive trend in enterprise IT over the past decade, and security teams have not escaped turmoil during the transition. It’s understandable for security professionals to feel like they’ve lost some control in the cloud and feel frustrated while attempting to get […] The post 12 Ways Cloud...
Better Vulnerability Management: How to Master Container Security in Three Steps

By Nate Dyer, Product Marketing Director, Tenable Application containers like Docker have exploded in popularity among IT and development teams across the world. Since its inception in 2013, Docker software has been downloaded 80 billion times and more than 3.5 million applications have been “dockerized” to run in containers. With all the enthusiasm and near-mainstream […] The post Better Vulnerability Management:...

Scaling Cloud Forensics & Incident Response with OSQuery

An enterprise has a diverse environment (cloud instances, servers, workstations) in which to try and detect potential security incidents. The ability of an incident response team to work quickly and at necessary scale is imperative when incidents do unfortunately occur. After an initial compromise, attackers often move laterally in an environment, trying to establish a foothold and escalate privileges. While...
Eliminate Vulnerability Overload – take your basic Nessus Scan data to the next

Nessus has been around for 21 years now and with over 109,000 vulnerabilities in its scan database, is the undisputed global standard tool for Vulnerability Management, that everyone uses, knows and loves. Nessus is a great tool but unfortunately in any medium or large organization, with Nessus alone, you will soon be buried in a mountain of unprioritised vulnerability data....
Extending Zero Trust to the Cloud: Real-World Business Challenges and Benefits

Much has been written and spoken about Zero Trust and the principles of “never trust, always verify” as a means for enterprises to implement effective network segmentation. As the model has been embraced, Zero Trust evolved to become a strategic Cybersecurity initiative that major enterprises align to in order to prevent successful cyberattacks. However, Is it a security buzz word...
The Rise and Fall and Rise of the Edge: Penn State & Duo on the Zero-Trust Strat

In this webinar you will learn: - Real examples from Penn State of how network topology has gotten exponentially more complicated - Why attackers have shifted from systems-focused to data-focused attacks - What the evolution of IoT and BYOD-rich environments means for security teams We’ve come a long way from the days of mainframe systems and a security strategy that ended at the edge...
The Rise of Privacy in the Cloud Era

In a globally connected world where the number of cloud applications consumed by organisations rises daily, the challenges associated with protecting data and individual’s privacy are therefore also on the rise. In this webcast we will look at some of the challenges associated with privacy including: - Understanding contractual obligations - Managing the geolocation of data - Applying data transfers mechanisms and...
Top “Must Do” Steps for Securing Your Public Clouds

Many enterprises have inadvertently exposed proprietary information by failing to properly secure data stored in public cloud environments like Amazon Web Services, Microsoft Azure and Google Cloud Platform. While cloud computing has made it simple to spin up a new server without waiting for IT, this can also be a security nightmare. A simple misconfiguration or human error can compromise...
Organisational Behavior for Cyber Risk Governance Using Security Ratings

This webinar will take a case study approach to demonstrate how security ratings can be leveraged to gain insight the cyber risk governance of organisations. Are organisations working in a structured manner to address cyber risk or are they purely reaction driven? We will look at organisations that have been breached in the last 12 months and explore what...
Preventing AWS Misconfiguration and the Risk of Data Breaches

Today’s enterprise needs to move fast at scale in the cloud, but the dynamic and complex nature of the cloud has introduced a significant new risk: a data breach due to misconfiguration and human error. In large enterprise cloud environments, it’s not uncommon to have tens of thousands of resources spanning hundreds of AWS accounts. This creates a challenge for...