CCSK Research Sponsorship

Transcription

1 CCSK Research Sponsorship

2 Overview The industry s first user certification program for secure cloud computing, the Certificate of Cloud Security Knowledge (CCSK) is designed to ensure that a broad range of professionals with responsibility related to cloud computing have a demonstrated awareness of the security threats and best practices for securing the cloud. The CCSK provides evidence that an individual has successfully completed an examination covering the key concepts of the CSA guidance and ENISA whitepaper. As the next progression in CCSK professional development, CSA is developing more advanced and specialized education for three areas: Software Development, Systems Architecture and Auditing/Assurance. We will initially provide educational courseware and whitepapers, a new examination is not currently planned. This document provides information about sponsorship opportunities for the development of these exciting new areas. About the Cloud Security Alliance The Cloud Security Alliance is a not for profit, vendor neutral organization with a mission to promote the use of best practices for providing security assurance within Cloud Computing, and to provide education on the uses of Cloud Computing to help secure all other forms of computing. The Cloud Security Alliance is led by a broad coalition of industry practitioners, corporations, associations and other key stakeholders. CSA has grown tremendously since we publicly launched in April 2009, and we continue to set the pace as the industry leader in research and best practices for developing the trusted cloud ecosystem. 35,000 members worldwide, in over 60 chapters Not for profit organization registered as a 501(c)6 corporation with the US Internal Revenue Service Developed first comprehensive best practices for secure cloud computing, Security Guidance for Critical Areas of Focus for Cloud Computing (April 2009, updated December 2010 and October 2011) First and only user certification for cloud security, the CCSK (Certificate of Cloud Security Knowledge, September 2010) Tools for managing Governance, Risk and Compliance in the Cloud (GRC Stack) Registry of cloud provider security practices, the CSA STAR (Security, Trust & Assurance Registry, Q4 2011) Industry leading security practices, education and tools developed by 20 working groups Copyright 2012 Cloud Security Alliance 1

3 Selection of CSA venue by US White House to announce the US Federal Cloud Strategy in 2011 Leadership in developing new security standards addressing cloud computing Trusted advisor to governments and Global 2000 firmss around the world The CSA Portfolio CSA quickly captured industry thought leadership by being the first mover in several areas due to our philosophy of agility, community and meritocracy. Cloud computing can be seen as a generation shift towards creating a global compute utility,, even if it will create several different global and local clouds. Cloud s dynamism and the criticall decisions being made by the public and private sector today with a long tail of impact have createdd a growing sense of urgency within CSA to continue our aggressive production of critical research, education and tools. Our research includes fundamental projects needed to define and implement trust within the future of information technology, which include cloud computing, mobile and big data. Copyright 2012 Cloud Security Alliance 2

4 CCSK Initiative The initial CCSK certification provides foundational knowledge in cloud security for a wide range of IT professions. The CSA Certification Board has identified three areas of specialization for future expansions of the CCSK program: CCSK for Security Architects CCSK for Software Developers CCSK for Audit/Assurance Our initial foray into CCSK specializations willl be to provide courseware training and an accompanying certificate of completion, not a separate examination. Copyright 2012 Cloud Security Alliance 3

5 Proceeds from a CCSK Sponsorship would be used to further development of CCSK in these three areas: CCSK for Software Developers Whitepaper: Security best practices for software development in the cloud and recommended industry curriculum. Curriculum to be applicable and provide knowledge for major public and private cloud platforms. Courseware: Development of 3 day courseware derived from above whitepaper and other CSA materials. CCSK for Security Architects Whitepaper: Security best practices for security architecture in the cloud derived from CSA Domain 1, Trusted Cloud Initiative Reference Architecture model and new materials. Courseware: Development of 3 day courseware derived from above whitepaper and other CSA materials. CCSK for Cloud Auditing/Assurance (GRC Stack) Whitepaper: Security best practices for assurance in the cloud derived from CSA Guidance 3 and components of the GRC Stack research projects. Courseware: Development of 3 day courseware derived from existing GRC Stack courseware, above whitepaper and other CSA materials Courseware will be made available to CSA Training partners. Partnerships will also be established with higher education institutions. CCSK Research Sponsorship Benefits Sponsored Research Listing Sponsor will be permanently listed as a charter sponsor with logo and URL link at initiative website and related areas, such as printed collateral. Press activity Sponsor will be included in press release activity related to key project milestones, including the opportunity to provide supporting quotes for the project. Copyright 2012 Cloud Security Alliance 4

6 Blogging, Twitter & Webcasts Sponsor will participate in communications related to the project, including CSA funded webcasts, project blogs and use of the CSA corporate Twitter account. Whitepaper Download Information Sponsor will receive monthly list of individuals opting in when downloading the individual CCSK whitepapers. Branded Deliverables Whitepapers, presentations and related project deliverables will include an acknowledgement of sponsor and will include sponsor logo. Sponsor will also be allowed to incorporate project deliverables into sponsor s own whitepapers and related collateral with appropriate acknowledgements to CSA. Events The Research Initiative will be highlighted in CSA events, providing exposure for sponsors of the initiative. Signing Up Please contact Jim Reavis at jreavis@cloudsecurityalliance.org for more information, pricing and terms for this Research Sponsorship. Copyright 2012 Cloud Security Alliance 5