Name: GAIA-X: Current Status and Outlook – What to Expect and How to Engage
Start: 2020-11-03T09:45:00Z
End: 2020-11-03T09:45:24.000Z
Location: BrightTALK
Rating: 4

CSA CloudBytes was launched as a webinar series to help us educate the industry on all matters related to the cloud. Our channel is designed to inform our audience about trending topics, new technologies, and latest research. Learn more at cloudsecurityalliance.org.  Join the Cloud Security Alliance on LinkedIn and follow us on twitter: @cloudsa

Generative AI tools like ChatGPT are rapidly being adopted across enterprises to drive efficiency, but they come with real and immediate security implications.

Recent studies show that 15% of employees are pasting data into GenAI tools, and 1 in 3 are unknowingly sharing sensitive information. These behaviors create a new layer of risk: inadvertent data leaks, compliance violations, and exposure of confidential assets.

As a result, most organizations face a blunt choice: block GenAI entirely or allow it unchecked. Neither option is valid in today’s world. But GenAI security and productivity shouldn’t be an “either-or” choice.

In this webinar, LayerX security leaders will break down how to secure GenAI usage without sacrificing its value. You’ll get a clear understanding of how these tools are being used, what risks they create, and what practical steps you can take to mitigate them.

Register for this webinar to learn:
• Industry Insights: See how and where GenAI is being used across the enterprise—by whom, for what, and how often.
• Risk Breakdown: Learn what kinds of sensitive data are being exposed, and what that means for your security and compliance posture.
• Protective Actions: Walk away with specific policies, controls, and tools to reduce risk while enabling safe GenAI adoption.
• Real World Lessons: Hear how leading security teams are addressing these challenges in real-world environments.

Whether you’re a CISO, a security architect, or part of the compliance team, this session will give you clear, actionable guidance to secure your organization’s GenAI usage—before it becomes a problem.

Register now and take control of GenAI security before it takes control of you.

Preventing GenAI Data Leakage: Enabling Innovation Without Compromising Security

This webinar offers cloud network security experts an in-depth look at the paradigm shift from traditional perimeter-based security to a modern application-centric approach. Discover why conventional data center security models, relying on static policies and firewalls, are ill-suited for the dynamic nature of cloud environments, which are characterized by the explosive growth of IaaS, PaaS, and SaaS. We will explore the critical challenges posed by vanishing perimeters, lack of visibility into cloud environments, and the complexities of securing highly dynamic resources like VMs, containers, and microservices. The session will detail the core principles of application-centric security, including achieving granular visibility into application dependencies, implementing Zero Trust frameworks with verification and validation checkpoints, and leveraging microsegmentation for enhanced isolation. Furthermore, learn how automation and orchestration are essential for consistent policy enforcement, faster response times, and increased efficiency in managing cloud security at scale across diverse multi-cloud and hybrid infrastructures.

The Evolution of Cloud Network Security: From Silos to Service-Centricity

AI is already transforming how software is built—but for security teams, it’s mostly just making life harder. Developers are shipping AI-generated code at breakneck speed, while security teams struggle to keep up. The challenge isn’t just securing AI-generated code and systems—it’s evolving your AppSec program to keep pace with software development.

We'll provide a framework to how security teams can evolve their programs across two key dimensions: securing AI-driven software development and using AI to enhance security workflows. You’ll learn:
• Strategies for managing risks from AI-generated code and autonomous agents
• How security teams can use AI to reduce work and improve security outcomes
• Where AI can enhance security—and where human expertise remains irreplaceable

AI isn’t just a security challenge; it’s a chance to build a smarter, more efficient security program. Join us to learn how to make AI work for security, not against it.

Evolving Your AppSec Program in the Era of AI

AI Agents are becoming deeply embedded across engineering and business workflows, but the speed of their adoption is outpacing governance. With multiple platforms enabling easy AI Agent creation (from IdPs to PaaS vendors), security teams are struggling to track who’s spinning them up, what identities they use, and where they operate.

In this 30-minute session, we’ll break down:

• What qualifies as an AI Agent (and what doesn’t)
• The types of non-human identities (NHIs) fueling them
• The rise of shadow AI Agents - why they’re spreading fast, where they hide, and the risks they pose
• Detection techniques, from fingerprinting via user agents and IPs to deeper code-level analysis
• Practical steps to bring AI Agents into your governance program without slowing innovation

Whether you’re already encountering rogue agents or getting ahead of the curve, this session will give you concrete takeaways to strengthen visibility and

Finding Shadow AI Agents - and the Identities Behind Them

Mergers and acquisitions can fuel growth—but they also create prime opportunities for cyber threats. Financial services organizations must act fast to secure newly acquired entities, maintain compliance, and prevent cyber risks from jeopardizing the deal.

In this webinar, security leaders will learn:

• The biggest cybersecurity risks during M&A and how attackers exploit them
• Best practices for securing the business throughout the process
• How organizations can reduce risk, ensure compliance, and streamline cloud security during M&A

Join Ilaiy Elangovan, Head of Cyber Product Development & Innovation at Visa, Expel's Lauren Horaist, Director of Product Management, and Peter Katz, VP & General Counsel, for an expert discussion on protecting your expanding organization—without slowing down the deal.

How to Protect M&A in FinServ: A Conversation with Visa and Expel

Imagine a SOC where AI-powered agents work together like a virtual team—handling alerts, eliminating noise, and responding to threats faster than ever before.   

Join ReliaQuest experts Brian P. Murphy, Chief Scientist, and Jonathan Echavarria, Principal Research Scientist, as they explore the transformative power of AI multi-agent systems. Learn how these "super agents" collaborate to automate Tier 1 and Tier 2 tasks, improve detection and response, and empower your team to focus on high-impact priorities.   

In this session, you’ll discover:   
• How multi-agent systems enable autonomous, end-to-end security operations.   
• The productivity gains of eliminating repetitive tasks and alert fatigue.   
• The future of AI in SecOps and what it means for your team.

AI Multi Agents: Delivering Autonomous SecOps

Results from InformationWeek’s State of Endpoint Management Automation survey show that even with endpoint management budgets on the rise, organizations remain mired in manual tasks, legacy technologies, and a distributed technology stack that hinder effective and secure management of endpoint devices.

Register for this webinar to hear from experts discuss the findings from the recent research report and share strategies and tech to help improve the secure patching of your organization's devices in the year ahead.

How to Prep Your ITOps Team for Secure Endpoint Management in 2025

The State of SaaS Security: Trends and Insights for 2025-26, commissioned by Valence in partnership with the Cloud Security Alliance, reveals a critical inflection point in SaaS security. While 86% of organizations now prioritize SaaS security with 76% increasing budgets, significant challenges persist that threaten enterprise security postures.

Survey data from 420 IT and security professionals highlights persistent visibility gaps, with 55% reporting employees adopt SaaS applications without security involvement. Identity management remains problematic, with 58% struggling to enforce proper privilege management and 46% citing challenges monitoring non-human identities. The expanding attack surface through GenAI tools and SaaS-to-SaaS integrations presents new vulnerabilities, with 56% of organizations concerned about overprivileged API access to sensitive data. 

This webinar will explore key insights from the report, including emerging threat vectors, effective mitigation strategies, and how organizations can evolve their security programs to match the complexity of modern SaaS environments.

State of SaaS Security

The security for AI landscape is constantly evolving, protecting AI as it advances from standalone models to complex agents. In this webinar, we demystify what it means to secure AI models, applications, and agents. Whether you’re building your own model or deploying frontier or open-source systems, you need to understand the full lifecycle to secure it. From AI red teaming during development to runtime defense in production systems, this webinar provides actionable insights into securing against AI threats.

Breaking Down Security for AI: From LLMs to Agents

AWS is recognized as the most comprehensive cloud platform globally, but with complex identity management, permissions, and access controls, it can be difficult to know what you can secure at scale and where to start.

Join our cloud security experts to learn essential best practices for maintaining a secure AWS environment. Whether you’re a beginner or specialist, you’ll discover new strategies that will help continually strengthen your cloud security posture, enforce least privilege, and fix misconfigurations when they arise.

Cloud Data Security: AWS Best Practices

Discover how the Cloud Security Alliance and Northeastern University are shaping the future of safe AI. In this exclusive webinar, we unveil the Trusted AI Safety Knowledge certification program—an industry-first initiative designed to equip professionals with the principles, frameworks, and practical training to build and manage AI systems safely, securely, and responsibly.

You'll get a first look at the core components of the certification, including risk management strategies, regulatory alignment, and ethical frameworks essential to modern AI deployment. Learn how this collaboration brings together world-class academic rigor and industry-driven insights to address the urgent need for trusted AI expertise across business, compliance, and technical domains.

AI Safety Primer: Inside the Trusted AI Certification by CSA and Northeastern University

Navigate the complexities of securing your hybrid cloud. "Securing the Hybrid Cloud: Key Strategies for Network Security" tackles the critical challenges of achieving comprehensive application visibility, ensuring consistent rule alignment, and proactively managing evolving threats. Discover actionable strategies to fortify your network, optimize security posture, and gain unparalleled insight into your hybrid environment. Don't let the cloud's dynamic nature compromise your security—empower your team with the knowledge to protect your critical assets.

Securing the Hybrid Cloud: Key Strategies for Network Security

Geared towards security and IAM teams, this webinar will share insights into understanding and implementing a non-human identity solution effectively through key use cases, essential solution features and evaluation criteria that will help integrate NHI security into your broader identity strategy and strengthen your security posture.

How to Evaluate a Non-Human Identity (NHI) Security Solution

Salesforce Agentforce will revolutionize how sales, marketing, and customer service agents interact with customers and access internal documentation within the CRM tool.

However, without a proper roll out plan and understanding of how Agentforce works, your organization could face unexpected risks when it comes to security.

Join Varonis and Salesforce for an insightful discussion on mastering Agentforce, including a deep dive into how the tool works, how to plan for deployment, and other best practices that Salesforce users of all levels can adopt.

Unlocking Agentforce: Best Practices for Deploying Salesforce's AI Tools

Organizations are navigating a rapidly evolving threat landscape, with hybrid and multi-cloud environments introducing fragmented visibility and complex data exposure risks. To better understand how enterprises are managing this challenge, Thales commissioned the Cloud Security Alliance (CSA) to investigate how organizations view risk to improve their data security posture. The study explores how organizations identify and prioritize data risks, the classification methods and monitoring tools they rely on, and the limitations they face in achieving a unified, real-time view of their data security posture. It also highlights how risk-based security solutions can improve response effectiveness, reduce downtime, and support compliance by delivering continuous visibility and actionable intelligence across diverse environments. 

Join Hillary Baron, AVP of Research at the Cloud Security Alliance (CSA), as she reveals the results of the Understanding Data Security Risk survey. Also participating is Krishna Ksheerabdhi, Vice President of Product Marketing for Cybersecurity & Digital Identity (CDI) at Thales Group. They will discuss how organizations are unifying fragmented tools into cohesive platforms while adopting proactive, risk-driven approaches to enhance resilience, protect critical data, and streamline compliance.

Data Security Risk Insights for Improving Data Security Posture

Business continuity is top of mind in 2025. With AI-fueled cyberattacks at an all-time high, geopolitical instability in the news, and an ever-growing number of regulations to deal with, organizations are looking for solid foundations on which to build their operations.

In this webinar we will peel back the layers of operational resilience and explore practical ways in to help organizations:
• Remain compliant to regulations covering business continuity
• Protect their brand and reputation in an always-on world
• Look in detail at how to keep its mission critical services online
• Adopt fully managed business continuity cloud solutions

You should expect to come away from this webinar confident in your ability to stay compliant and operational, even during the most trying of circumstances.

Managed Business Continuity Cloud Solutions

Ever wonder what security leaders across industries are focusing on in the GRC space? What are their top priorities, and how should they shape yours?

Join Vanta’s GRC Subject Matter Expert, Faisal Khan, and Daniele Catteddu, CSA's Chief Technology Officer, for a deep dive on building and scaling GRC programs. They will share their take on the role of trust, AI, and automation in strengthening your foundation and preparing for what’s next.

What to expect:
Point of view on top of mind issues for GRC leaders
Role of trust management in scaling GRC 
Where to prioritize AI and automation in GRC

Scaling GRC with Trust, AI, and Automation

Dive into a full year of SOC data to identify trends in infrastructure targets, malware, schemes, and more to uncover strategies for improving your security resilience in the coming year. We’ll cover:
• Security data specific to the FinServ industry, including specific threats to be aware of and remediation tactics
• Comparisons of trends in FinServ versus cybersecurity customers as a whole
• Recommendations for keeping your FinServ organization secure

Analyzing Annual SOC Data to Inform Your 2025 FinServ Security Strategies

Developed by CSA and ISACA to meet the unique demands of auditing cloud based environments, the Certificate of Cloud Auditing Knowledge (CCAK) is the first credential that industry professionals can obtain to demonstrate their expertise in understanding the essential principles of auditing cloud computing systems. This session will provide a preview of the CCAK body of knowledge, including cloud security components based on CSA’s Security, Trust, Assurance & Risk (STAR) and Cloud Controls Matrix (CCM), as well as highlight key differentiators from other IT audit certification programs and illustrate the benefits of earning your CCAK.

CCAK: The industry's first global cloud auditing credential

Enterprise-ready cloud services and hybrid solutions have made it easier for users to complete their work wherever they are, but this flexibility expands the attack surface admins are expected to secure. Many organizations today are using zero-trust principles in their IAM (Identity & Access Management) strategy to solve this challenge, not just authenticating users but also checking if they meet the security policy at the point of access each time they log in.
Join Advisory CISO Richard Archdeacon from Duo Security learn how to develop your IAM programme while avoiding the top implementation pitfalls, and how Duo can help support your team’s zero-trust journey.

Zero Trust: The Key to your IAM Success

Due to the rapid growth of IoT and mobile devices, both fog computing and edge computing technologies were hastily developed, which resulted in security and privacy related challenges that could impact the integrity of information in the cloud. Fog computing and Edge computing are often confused for each other although minor difference exist, which change the security threat landscape and potential attack vectors. Come learn about security challenges, potential attacks and solutions, of Fog Computing and Edge Computing and their impact on the future of IoT device integration with the Cloud!

The Impact of Fog Computing and Edge Computing on Cloud Security

The world of third-party risk management is rapidly changing. Each day, organizations like yours face new security, privacy, and compliance threats when working with third parties. The good news is there are world-class teams around the world that are paving the way with new best practices for the next generation of third-party risk management. In working with hundreds of these organizations, we’ve seen first-hand what it takes to be successful and secure when working with third parties.​
​
So, is your third-party risk management program ahead of the curve? Attend this webinar to find out and learn more about:​
​
- New trends in the third-party risk industry​
- What emerging threats you can expect and how to address them​
- How to find and leverage assessment communities and shared due diligence data​

A How-To Guide: Navigating the Top 7 Trends in Third-Party Risk Management

Since its debut in 2013, the Cloud Control Matrix (CCM) v3.0.1 has been greatly successful and received wide adoption around the globe. Nevertheless, as new technologies emerge and the cloud certification landscape continuously evolves, so must the CCM. To this end, the upgrade of CCMv3.0.1 to the next CCMv4.0 has been imperative. A CCMv4.0 task force has been put together,  consisting of a total number of 18 teams led by highly experienced cloud security experts, that is currently driving CCM v4.0 development and is expected to conclude its works by end of Q4 2020.

This session will provide a presentation and overview of:
- CCMv4 domains and new control requirements,
- A draft version of the new CCMv4 “implementation guidance”,
- The new Shared Security Responsibility Model (SSRM) controls for helping CSPs and CSCs delineating CCM controls implementation responsibilities,
- The enhanced Consensus Assessment Initiative Questionnaire (CAIQ) v4.0 following the upgrade to CCMv4.0,
- Mapping exercises of CCMv4.0 to other well known standards, as performed by the CCM WG,
- The latest activities for the development of CCMv4.0-Lite.

Cloud Control Matrix V4

As a central authentication service that processes billions of logins a month, credential stuffing attacks are the most common threats we observe. These attacks can lead to fraud, loss of reputation, and ultimately, loss of revenue.

In credential stuffing attacks, threat actors use stolen credentials from one breach to takeover users’ other accounts. This is effective because 65% of people reuse passwords across multiple accounts, according to Google. On some days, these attacks originate from more than 50,000 IP addresses and may account for as much as half of all login attempts using our platform. Even the most mature companies are vulnerable if they don’t have the right preventative measures in place.

Join Auth0's session to learn:
- How credential stuffing attacks work
- What effect they can have on your company
- How a multifaceted response can help detect and rapidly resolve these attacks

What You Need to Know About Credential Stuffing Attacks

Awaken your approach to cloud with a reference architecture that modernizes your enterprise. John covers the foundational components of the CSA Enterprise Architecture and shares how it is used to to secure multiple cloud implementations. Overlayed onto existing architectures or leveraged on its own, the model helps organizations identify existing security gaps and redundancies in a cloud environment. The approach is also used to roadmap and create key progress indicators for securing your organization’s cloud strategy.

A Referenced Architecture to Modernize Your Approach to Cloud

As more workloads move to the cloud, it is critical to secure those workloads against known vulnerabilities.  The benefits of the cloud allow for agility, speed and innovation, but the cloud also can pose a challenge for vulnerability management.  This session will review best practices for cloud-vulnerability management, with a strong focus on automation. The session also will demonstrate options for asset-management, vulnerability-detection, remediation and reporting surrounding cloud vulnerabilities.

Unveiling the Wonder of Automated Vulnerability Management in the Cloud

The CSA has recently celebrated the 1000 entries into the STAR Registry. This was confirmation of the value and relevance of the STAR program in the cloud community.  

The STAR Program has evolved into a framework that provides a flexible, incremental and multi-layered cloud provider system that is being recognized as the international certifiable harmonized GRC solution, starting with its rich history through development, implementation and the three levels of the Open Certification Framework that makes up the STAR Program. As any successful program, STAR will keep on maturing and evolving over time to better serve the cloud ecosystem and its need for trust. 

Join us as Daniele Catteddu; CTO and John DiMaria; Assurance Investigatory Fellow provide you with insight into the STAR Program Roadmap, on the reasons behind the development of the new components and what’s their state of development.

STAR Future Roadmap

When talking about cloud it’s easy to fallback to that old joke that cloud is just someone else’s computer. Unfortunately it’s also easy to see it as Someone Else’s Problem (SEP). Ford Prefect, from The Hitchhiker's Guide to the Galaxy, said “An SEP is something we can't see, or don't see, or our brain doesn't let us see, because we think that it's somebody else's problem.”  In this session we examine what that means in the cloud and how we can avoid assuming our security is good enough.

Shared Responsibility: Someone Else’s Problem

Introduction to CSA's Quantum Safe Security Working Group and its goals and objectives. Quantum computers continue to strengthen and soon will be able to break traditional forms of asymmetric encryption and weaker symmetric ciphers. Attend this session to learn about the coming quantum crypto break and what your organization can do now to prepare. It will cover the state of post-quantum cryptography and quantum key distribution. If you don't know much about what is going on in the quantum computing world, the threats, and what we are doing to prepare, this is a good presentation to attend.

Get Quantum Safe

Cloud security is a software engineering problem, not a security analysis one. The engineers that build and maintain cloud infrastructure need policy-as-code tools to ensure cloud security and compliance.
Open Policy Agent is an open source standard for policy-as-code that’s ideal for cloud infrastructure. 

In this talk, Josh Stella, cofounder and CTO at Fugue, will walk through how OPA works and how cloud engineering teams can leverage it for their use cases, including validating infrastructure-as-code and integrating cloud security into CI/CD pipelines.

• How OPA and the Rego policy language work for a variety of cloud security use cases
• How developers can check Terraform against policy with Regula, an open source tool that uses OPA
• How to use OPA with CI/CD tools to integrate cloud infrastructure security into automated delivery pipelines

Using OPA for Continuous Compliance with Cloud Infrastructure Policy-as-Code

Over recent years, security and compliance have been some of the top considerations when moving to the cloud. However, as Covid-19 has served as a transformation accelerator in many aspects of our digital life, cloud consumption is skyrocketing, and cloud transformations are booming. In order to achieve a sustainable cloud experience, it is now more important than ever, that security & compliance are not sacrificed for the speed of migration.
 
In this talk, we will not only investigate the current state of cloud security, but we will also elaborate on scenarios and capabilities that support organizations in rapidly and securely adopting the cloud, and in maintaining compliance once operating in the cloud.

Cloud Security post Covid-19, Where to Go Next

What is the value of security ratings when it comes to predicting breaches? What are the indicators that breached companies are showing that non-breached companies don’t express?  This session will examine breaches that have occurred in 2020 and present those security issues most commonly found in breached companies versus control groups of companies in the finance and healthcare that have not experienced publicly notified breaches. We will look at overall ratings, factor ratings and specific security issues which are more predominant in breach groups and illustrate the correlation to breach likelihood.

The Correlation Between Security Ratings and Breach Likelihood

This session is designed to introduce the publication of CSA’s unique insights into the challenges of mastering the widespread adoption of cloud technologies. More importantly, CSA will help members understand the importance of translating identified cloud and technology risks into those risks that are crucial to achieving business success and prosperity - the true rationale for the widespread growth of cloud computing. The presentation will also reveal those hidden technical risks that can expose organizations to operational failure, regulatory non-compliance, data breaches, external attacks and supply chain disruption.

CSA’s Perspective on Cloud Risk Management

Cloud Security Alliance EMEA Congress 2020

The key objectives of GAIA-X, Community Engagement and participation via the GAIA-X Association. European Data Infrastructure as part of NextGenerationEU - based on GAIA-X.

GAIA-X: Current Status and Outlook – What to Expect and How to Engage

IT Security

Information Security

Cloud Computing

GAIX-X

Cloud Adoption

Cloud Architecture

Cloud

Data Security

Data Breach

IT Governance

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

GAIA-X: Current Status and Outlook – What to Expect and How to Engage

Presented by

About this talk

Cloud Security Alliance: CloudBytes