Explores where AI helps in pen testing, current limits, and how to integrate AI with human oversight, data controls, and governance.

Research conducted in collaboration with Jazz finds that, among respondents experiencing data loss, only 16% said DLP blocked their most significant incidents before data left the organization SEATTLE ...

Enterprise resource planning systems deployed a decade or more ago remain fully capable of tracking inventory, processing invoices, and managing shipping schedules. What these systems typically cannot ...

Written by Rafy Meghnagi, Cloud & AI Security Leader; Giacomo Ciccarelli, Manager; Michele Veroni, Senior Consultant; Melania Cacace, Consultant at Deloitte Italy. Most security organizations have ...

Stay informed about the latest best practices, reports, and solutions in cloud security with CSA research. Stay connected with the cloud security community by attending local events, workshops, and ...

Written by Marina Bregkou, Principal Research Analyst, Associate VP, CSA. The Cloud Security Alliance (CSA) recently announced the release of the AI Controls Matrix (AICM) v1.1, a significant update ...

The AI Controls Matrix (AICM) is a first-of-its-kind vendor-agnostic framework for cloud-based AI systems. Organizations can use the AICM to develop, implement, and operate AI technologies in a secure ...

AI agents introduce architectural and security challenges that extend beyond traditional application engineering. Their autonomous operation, tool access, persistent memory, and inter-agent ...

For the first time in more than twenty years, the HIPAA Security Rule is getting a serious overhaul. On December 27, 2024, the U.S. Department of Health & Human Services (HHS) Office for Civil Rights ...

The shadow AI conversation that started two years ago was about data leakage. An employee pasted a customer list into ChatGPT. A developer dropped proprietary code into a chat window. The risk was ...

Written by Jim Reavis, Co-founder and Chief Executive Officer, CSA. Two exponential curves are converging in 2026: step-level improvements in AI model capabilities and the viral adoption of autonomous ...

Lack of visibility remains a top security risk with 65% of respondents reporting AI agent-related incidents in the past year SEATTLE – April 21, 2026 – A new survey report from the Cloud Security ...