ChaptersCircleEventsBlog
Share how your organization adapts IAM practices to AI. Take the AI Identify Risk & Readiness Survey today!

CSA Research

Best practices, guidance, frameworks and tools to help the industry secure the cloud. Read our research to get your questions around cloud security answered.
Research

CSA Research is created by the industry for the industry and is both vendor-neutral and consensus driven. Our research is created by subject matter experts who volunteer for our working groups. Each working group focuses on a unique topic or aspect of cloud security, from IoT, DevSecOps, Serverless and more, we have working groups for over 20 areas of cloud computing. You can view a list of all active research working groups. To find out more about how our research is created and the process we follow you can view the CSA Research Lifecycle.

Contribute to CSA Research

Peer reviews allow security professionals from around the world to collaborate on CSA research. Provide your feedback on the following documents in progress.

Publications in Review
Open Until
Aug 08, 2025
Aug 08, 2025

Latest Research

CAIQ Lite (Legacy)

CAIQ Lite (Legacy)

Release Date: 07/30/2025

Secure Agentic System Design: A Trait-Based Approach

Secure Agentic System Design: A Trait-Based Approach

Release Date: 07/30/2025

Thanks to powerful reasoning models, AI agents are making more nuanced decisions and interacting more effectively with their environments. At the same time, AI researchers continue to develop more dedicated agentic AI frameworks and platforms. These platforms enable a wider range of...
Code of Practice for Assessment Firms Offering STAR

Code of Practice for Assessment Firms Offering STAR

Release Date: 07/30/2025

This document is designed for assessment firms participating in CSA’s STAR Certification or Attestation program. It provides a strategic, practical guide for firms looking to effectively upsell STAR services to clients. Whether your firm works with large cloud providers, mid-sized SaaS...