Hugging Face incident shows an AI agent breaking containment, breaching systems, and stealing data, prompting a reassessment ...

The CCM-Lite is a simplified version of the Cloud Controls Matrix (CCM) v4.1. It includes 96 carefully chosen controls, a subset of the original 207. These controls are essential for any ...

Implementation Guidelines: Defines practical, role-based recommendations for applying AICM controls to AI systems operating in cloud environments. Each control includes detailed implementation ...

Overview of the August 2025 Salesloft incident: attackers abused Drift OAuth tokens to exfiltrate Salesforce data, ...

From market visibility to trusted security expertise, CSA Corporate Membership equips your organization with the tools and partnerships to thrive.

This publication from the CSA AI Governance & Compliance Working Group addresses the urgent need for a more holistic perspective on AI governance and compliance, empowering decision makers to ...

Identity and Access Gaps in the Age of Autonomous AI Aembit is the non-human identity and access management company. Backed by $45 million in total funding, including a recent $25 million Series A ...

CSA's AI Controls Matrix v1.1 expands coverage with Model Security domain, mappings to major AI frameworks, and governance ...

This document updates the Cloud Security Alliance (CSA) Software-Defined Perimeter (SDP) Specification. Version 1.0 was written by the Software Defined Perimeter Working Group and published in April ...

CSA Chapters unite cloud security professionals worldwide, fostering collaboration, knowledge-sharing, and career growth. CSA Chapter connects you to a vibrant local and global community. Whether you ...

An IEEE standard for local and metropolitan area networks–Port-Based Network Access Control. IEEE 802 LANs are deployed in networks that convey or provide access to critical data, that support mission ...