- July 18, 2014
The Cloud Security Alliance has updated its Cloud Controls Matrix (CCM) and Consensus Assessments Questionnaire (CAIQ) to help enterprises standardize cloud provider security assessments.
- July 15, 2014
Verizon bolstered its cloud security presence with a new web application firewall. The cloud-based WAF puts the telecom giant in the growing cloud firewall market with Akamai, Imperva and others.
- July 15, 2014
Exclusive: The co-founder of One More Cloud explains how an old AWS API key was used to take down the company's services, and the hard lessons learned.
- July 14, 2014
Cloud-based malware analysis is becoming a must-have feature for both established and upstart advanced threat protection vendors.
- May 30, 2014
Security pros say infosec teams must be proactive on cloud security management to reduce risk related to rapid growth in enterprise cloud computing.
Sponsored by Rackspace - It’s a challenging time to be a CIO in an enterprise IT environment. I’ve seen the role evolve dramatically over the years, from chief of back-office IT to dynamic business enabler. The “I” in “CIO” could now stand for “innovation” instead of “information.” See More
Sponsored by evident.io - One of the most important challenges for CIOs and CISOs is to gain visibility into their cloud security stance. If they can’t identify where security or compliance gaps exist, how can they be expected to put the proper controls and protections into place? See More
Sponsored by Rackspace - According to Deloitte’s 2016-2017 global CIO survey, the top expectations that the business has of CIOs are improving processes, reducing costs and driving efficiencies. This is consistent with a 2016 report from Technology Business Research, which found that efficiency metrics are the primary drivers behind the adoption of cloud professional services. See More
Sponsored by evident.io - Whether you are responsible for overall IT, IT security, DevOps or regulatory compliance, chances are public cloud services are an ever-growing part of your portfolio. This can be great for the business, enabling lower costs, greater agility and faster speed to market. But it can present new and difficult challenges in ensuring security and compliance. See More
- May 29, 2014
The consequences for cloud service providers missing the FedRAMP deadline remain unclear, though experts say those in the queue are in good shape.
- May 07, 2014
A Netskope report shows a flood of cloud security policy exceptions commonly thwart rogue cloud app security controls.
- April 25, 2014
A new report shows the volume of cloud attacks is rising, as attack types traditionally associated with on-premises environments migrate with users.
- April 01, 2014
Emerging cloud attacks threaten cloud data security by exploiting the gap between enterprise controls and provider transparency.
- March 04, 2014
Until a common cloud provider assessment paradigm is agreed upon, experts say enterprises will be left wanting on cloud data security validation.
- February 25, 2014
Panelists at the Cloud Security Alliance Summit assert that federated identity and gateways, hardly new technologies, are best for BYOD-SaaS security.
- January 22, 2014
The updated EU General Data Protection Regulation raises breach penalties for enterprises operating in the EU. Attorney Francois Gilbert explains.
- December 19, 2013
The Cloud Security Alliance hopes Cloud Trust Protocol will boost cloud transparency by automating customer requests for cloud provider security data.
- December 10, 2013
Video: CSA CEO Jim Reavis recaps the 2013 Cloud Security Alliance Congress, including its SAFECode partnership and Software Defined Perimeter effort.
- December 09, 2013
Nation-states are turning their attacks toward the cloud. One expert explains why he believes security automation is the only viable defense tactic.