Five practical priorities for turning AI-enabled vulnerability discovery into coordinated remediation and verified risk reduction. On July 14, 2026, the White House announced GOLD EAGLE, a ...

Five practical security lessons distilled from public responses on how increasingly autonomous agents change trust, authority, observability, and system assurance. In January 2026, the National ...

An IEEE standard for local and metropolitan area networks–Port-Based Network Access Control. IEEE 802 LANs are deployed in networks that convey or provide access to critical data, that support mission ...

Written by Jim Reavis, Co-founder and Chief Executive Officer, CSA. Cloud Security Alliance is building industry consensus around governance and security controls for autonomous AI. We welcome the ...

Hybrid and multi-cloud security teams want to prevent policy failures before they reach production. According to our recent s urvey report, impact or risk assessment before committing a policy change ...

The Cloud Security Alliance (CSA) created the Security, Trust, Assurance, and Risk (STAR) program in August of 2011 to improve transparency and security within cloud computing. This program was built ...

Written by Rich Mogull, Chief Analyst, CSA. This week I was at the [un]prompted AI security conference, put on by CSA’s very own Gadi Evron. It was an amazing event with stellar presentations and ...

Zero Trust is one of the most widely talked about cybersecurity trends today. Zero Trust says no part of a computer and networking system can be implicitly trusted, including the humans operating it.

For TPRM teams, it serves as a baseline of security capabilities during SaaS vendor assessment, simplifying risk assessments and procurement processes. For SaaS vendors, it standardizes assessment ...

This publication analyzes the security, technical, regulatory, and business considerations associated with multi-cloud key management. It provides practical recommendations for protecting symmetric ...

CSA’s Cloud Infrastructure Security Training helps make cloud security knowledge more accessible by providing a high-level introduction on some of the most critical cloud security topics. Based on ...