Overview of the August 2025 Salesloft incident: attackers abused Drift OAuth tokens to exfiltrate Salesforce data, ...

To better understand the current state of the industry, Thales commissioned CSA to develop a survey and report. The report aims to illuminate current data security risk assessment practices and areas ...

From market visibility to trusted security expertise, CSA Corporate Membership equips your organization with the tools and partnerships to thrive.

Best practices, guidance, frameworks and tools to help the industry secure the cloud. Read our research to get your questions around cloud security answered.

The use of cloud services has continued to increase over the past decade. Particularly in the wake of the COVID-19 public health crisis, many enterprises’ digital transformations are on an accelerated ...

An IEEE standard for local and metropolitan area networks–Port-Based Network Access Control. IEEE 802 LANs are deployed in networks that convey or provide access to critical data, that support mission ...

View all upcoming CSA courses around the world. We offer courses in multiple formats including: online self-paced, virtual instructor-led and in-person.

U.S. Veterans can now receive full coverage for the Certificate of Cloud Security Knowledge (CCSK) exam under the GI Bill®. The Post-9/11 GI Bill is eligible for U.S. veterans who have served at least ...

This document serves as guidance for enterprise technologists and service providers to effectively and securely manage cryptographic keys throughout the key management lifecycle. It outlines best ...

CSA's AI Controls Matrix v1.1 expands coverage with Model Security domain, mappings to major AI frameworks, and governance ...

Written by Harish Peri, SVP & GM, AI Security, Okta. Software used to wait for permission. It executed specific instructions predictably, transparently, and only when a human initiated a process.