Explores where AI helps in pen testing, current limits, and how to integrate AI with human oversight, data controls, and governance.

Research conducted in collaboration with Jazz finds that, among respondents experiencing data loss, only 16% said DLP blocked their most significant incidents before data left the organization SEATTLE ...

Understanding the fees associated with STAR can help organizations plan their assurance investment and choose a path that aligns with their goals. This guide brings together pricing for STAR, STAR for ...

SEATTLE – June 12, 2025 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud ...

CISA's AA26-251A should end the fiction that confidential model weights are enough to protect frontier capabilities. On September 8, 2026, the Cybersecurity and Infrastructure Security Agency, ...

To better understand the current state of the industry, Thales commissioned CSA to develop a survey and report. The report aims to illuminate current data security risk assessment practices and areas ...

The report presents each security incident as both a detailed narrative and a threat model. This includes an attack-style synopsis with the relevant cloud security risks, CCM controls, and mitigations ...

An IEEE standard for local and metropolitan area networks–Port-Based Network Access Control. IEEE 802 LANs are deployed in networks that convey or provide access to critical data, that support mission ...

This report provides case‌ ‌study‌ ‌analyses‌ ‌for‌ last year’s ‌ The‌ ‌Egregious‌ ‌11:‌ ‌Top‌ ‌Threats‌ ‌to‌ ‌Cloud‌ ‌Computing and a relative security industry breach analysis. Using nine actual ...

Stay connected with the cloud security community by attending local events, workshops, and global CSA conferences. Engage with industry leaders, gain new insights, and build valuable professional ...

Retrieval augmented generation (RAG) is an effective technique used by AI engineers to develop large language model (LLM) powered applications. However, the lack of security controls in RAG-based LLM ...