CINXE.COM

<!DOCTYPE html><html><head><title>About Juanita Koilpillai Service Award | CSA</title> <meta name="description" content="The Juanita Koilpillai Award is awarded to CSA members whose contributions reflect Juanita's passion for volunteerism."> <link rel="canonical" href="https://cloudsecurityalliance.org/research/juanita-koilpillai/service-award"> <link rel="image_src" href="/assets/social-share/facebook-429f9d45f1c2afbf16c63ff940668c3dfc1e7ed3f9155f98eab6691bf6b5fd82.jpg"> <meta property="og:locale" content="en"> <meta property="og:type" content="website"> <meta property="og:title" content="About Juanita Koilpillai Service Award | CSA"> <meta property="og:description" content="The Juanita Koilpillai Award is awarded to CSA members whose contributions reflect Juanita's passion for volunteerism."> <meta property="og:url" content="https://cloudsecurityalliance.org/research/juanita-koilpillai/service-award"> <meta property="og:site_name" content="CSA"> <meta property="og:image" content="/assets/social-share/facebook-429f9d45f1c2afbf16c63ff940668c3dfc1e7ed3f9155f98eab6691bf6b5fd82.jpg"> <meta name="twitter:card" content="summary"> <meta name="twitter:title" content="About Juanita Koilpillai Service Award | CSA"> <meta name="twitter:description" content="The Juanita Koilpillai Award is awarded to CSA members whose contributions reflect Juanita's passion for volunteerism."> <meta name="twitter:site" content="@cloudsa"> <meta name="twitter:site_name" content="CSA"> <meta name="twitter:creator" content="@cloudsa"> <meta name="twitter:image" content="/assets/social-share/facebook-429f9d45f1c2afbf16c63ff940668c3dfc1e7ed3f9155f98eab6691bf6b5fd82.jpg"><meta name="csrf-param" content="authenticity_token" /> <meta name="csrf-token" content="FLeEFIvqcMif-pRsJhe_ZFhTPYUf1wd0OuV66Rj6yEp8q1ig9kEuTHdHL1IXMCrYJPFZg1hR42-_iI0g9lzikg" /><meta name="csp-nonce" /><meta content="text/html;charset=utf-8" http-equiv="Content-type" /><meta content="width=device-width, initial-scale=1" name="viewport" /><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/favicon/favicon.ico" rel="Shortcut Icon" type="image/x-icon" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/iphone.png" rel="apple-touch-icon" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-57x57.png" rel="apple-touch-icon" sizes="57x57" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-60x60.png" rel="apple-touch-icon" sizes="60x60" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-72x72.png" rel="apple-touch-icon" sizes="72x72" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-76x76.png" rel="apple-touch-icon" sizes="76x76" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-114x114.png" rel="apple-touch-icon" sizes="114x114" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-120x120.png" rel="apple-touch-icon" sizes="120x120" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-144x144.png" rel="apple-touch-icon" sizes="144x144" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-152x152.png" rel="apple-touch-icon" sizes="152x152" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-180x180.png" rel="apple-touch-icon" sizes="180x180" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/favicon/favicon-16x16.png" rel="icon" sizes="16x16" type="image/png" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/favicon/favicon-32x32.png" rel="icon" sizes="32x32" type="image/png" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/favicon/favicon-96x96.png" rel="icon" sizes="96x96" type="image/png" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/android-chrome-icons/android-chrome-192x192.png" rel="icon" sizes="192x192" type="image/png" /><link rel="stylesheet" href="/assets/application-05bb97dee3bde9273f3ea4ad89383d77da30c6ea8d3bcd824987c3524b12507b.css" data-turbolinks-track="reload" /><link href="https://fonts.googleapis.com/css?family=Open+Sans%3A300italic%2C400italic%2C600italic%2C700italic%2C800italic%2C400%2C300%2C600%2C700%2C800&amp;#038;ver=1.0" media="all" rel="stylesheet" type="text/css" /><link href="https://fonts.googleapis.com/css?family=Titillium+Web%3A400%2C600&amp;#038;ver=1.0" media="all" rel="stylesheet" type="text/css" /><link href="https://use.typekit.net/tpr8qgx.css" rel="stylesheet" /><script>window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('consent', 'default', { 'ad_storage': 'denied', 'ad_user_data': 'denied', 'ad_personalization': 'denied', 'analytics_storage': 'denied', }); window.gtag = gtag;</script><script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({"gtm.start": new Date().getTime(),event:"gtm.js"});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!="dataLayer"?"&l="+l:"";j.async=true;j.src= "https://www.googletagmanager.com/gtm.js?id=" +i+dl;f.parentNode.insertBefore(j,f); })(window,document,"script","dataLayer",'GTM-WGMWDNB');</script><script src="/assets/application-ba4225ec596eebba3745394b97bb2fd7e5bcbe822dfa1440400acee76232d3fd.js" data-turbo-track="reload"></script><script async="" defer="" src="https://www.google.com/recaptcha/api.js?render=explicit"></script><script>window.addEventListener("turbo:before-render", function () { window.zEACLoaded = undefined; // this is the "hidden" global var that zendesk uses to check if it's loaded its widget yet });</script></head><body class="csa"> <noscript> <iframe src="https://www.googletagmanager.com/ns.html?id=GTM-WGMWDNB" height="0" width="0" style="display:none;visibility:hidden"> </iframe> </noscript>  <style>.callout-banner { text-align: center; position: relative; font-weight: 300; font-size: 12px; } @media screen and (max-width: 1110px) { .callout-banner { margin-top: 40px; } }</style><style>.app_notification a { color: white !important; text-decoration: underline; }</style><header class="csa-c-layout-header"><div class="o-area" id="quicklinks"><div class="c-quicklinks"><div class="o-container"><a class="c-quicklink" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"quick_links_menu","event_label":"Cloud 101 - https://cloudsecurityalliance.org/cloud-newbie"});" href="https://cloudsecurityalliance.org/cloud-newbie">Cloud 101</a><a class="c-quicklink" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"quick_links_menu","event_label":"Circle - https://circle.cloudsecurityalliance.org/"});" rel="noopener" target="_blank" href="https://circle.cloudsecurityalliance.org/">Circle</a><a class="c-quicklink" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"quick_links_menu","event_label":"Events - https://cloudsecurityalliance.org/events/"});" href="https://cloudsecurityalliance.org/events/">Events</a><a class="c-quicklink" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"quick_links_menu","event_label":"Blog - https://cloudsecurityalliance.org/blog/"});" href="https://cloudsecurityalliance.org/blog/">Blog</a><form class="c-quicklink" method="post" action="/auth/auth0"><button style="text-transform: uppercase;" data-turbo="false" type="submit">Sign in or Sign Up</button><input type="hidden" name="authenticity_token" value="OudIdt84YYKKKq8GOKvctf6hdrK1P6NmLv4sXDoOLAQdYGaaH35g4GY31h-QMGNPIlpzUid3q2wloUkRGrv7QQ" autocomplete="off" /></form></div></div></div><div id="megamenu"><div class="c-megamenu"><div class="o-container"><div class="o-grid"><a class="c-megamenu__logo o-grid__cell o-grid__cell--width-15@xsmall" href="/"><img src="/assets/CSA-logo-RGB-a0a3855889ad836fa585d60f6caf8d619f241d43904c304c2f64284127fe9bf3.svg" /></a><div class="c-megamenu__categories o-grid__cell o-grid__cell--width-75@xsmall"><div class="c-megamenu__category" data-target="#membership-nav"><div class="c-megamenu__anchor">Membership</div><div class="c-megamenu__category-content" id="membership-nav"><div class="o-container"><div class="o-grid o-grid--small-fit o-grid--medium-fit o-grid--large-fit"><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Membership Benefits - /membership/"});" href="/membership/">Membership Benefits</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Our Member Community - /membership/current/"});" href="/membership/current/">Our Member Community</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Get Involved - /membership/get-involved/"});" href="/membership/get-involved/">Get Involved</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Become a Member - /membership/contact/"});" href="/membership/contact/">Become a Member</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Member-Exclusive Programs</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Enabled Solutions - /star/registry/star-enabled-solutions/"});" href="/star/registry/star-enabled-solutions/">STAR Enabled Solutions</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Trusted Cloud Consultant - /trusted-cloud-consultant/registry/"});" href="/trusted-cloud-consultant/registry/">Trusted Cloud Consultant</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Trusted Cloud Provider - /trusted-cloud-provider/"});" href="/trusted-cloud-provider/">Trusted Cloud Provider</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certified STAR Auditors - /star/certified-star-auditors/"});" href="/star/certified-star-auditors/">Certified STAR Auditors</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Member Portal - https://cloudsecurityalliance.my.site.com"});" href="https://cloudsecurityalliance.my.site.com">Member Portal</a></div></div></div></div></div></div></div><div class="c-megamenu__category" data-target="#star-program-nav"><div class="c-megamenu__anchor">STAR Program</div><div class="c-megamenu__category-content" id="star-program-nav"><div class="o-container"><div class="o-grid o-grid--small-fit o-grid--medium-fit o-grid--large-fit"><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Home - /star/"});" href="/star/">STAR Home</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Registry - /star/registry/"});" data-turbo="false" href="/star/registry/">STAR Registry</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Submit to Registry - /star/submit/"});" href="/star/submit/">Submit to Registry</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Provide Feedback - /star/feedback/"});" href="/star/feedback/">Provide Feedback</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certified STAR Auditors - /star/certified-star-auditors/"});" href="/star/certified-star-auditors/">Certified STAR Auditors</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Enabled Solutions - /star/star-enabled-solutions/overview/"});" href="/star/star-enabled-solutions/overview/">STAR Enabled Solutions</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Stay compliant in the cloud</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CCAK Training - /education/ccak/"});" href="/education/ccak/">CCAK Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Lead Auditor Training - /education/star-lead-auditor-training/"});" href="/education/star-lead-auditor-training/">STAR Lead Auditor Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Training for Government Agencies - /education/gsa-schedule/"});" href="/education/gsa-schedule/">Training for Government Agencies</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Governance, Risk & Compliance Tools</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Cloud Controls Matrix (CCM) - /research/cloud-controls-matrix/"});" href="/research/cloud-controls-matrix/">Cloud Controls Matrix (CCM)</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Consensus Assessment Initiative Questionnaire (CAIQ) - /research/cloud-controls-matrix/"});" href="/research/cloud-controls-matrix/">Consensus Assessment Initiative Questionnaire (CAIQ)</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"EU Cloud Code of Conduct - /gdpr/eu-cloud-code-of-conduct/"});" href="/gdpr/eu-cloud-code-of-conduct/">EU Cloud Code of Conduct</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Level 1 - /star/registry/?level=1"});" data-turbo="false" href="/star/registry/?level=1">STAR Level 1</a></div><div class="c-megamenu__item-description">At level one organizations submit a self-assessment.</div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"View companies at level one - /star/registry/?level=1"});" data-turbo="false" href="/star/registry/?level=1">View companies at level one</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Learn about level one - /star/#tab_levelOne"});" href="/star/#tab_levelOne">Learn about level one</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Level 2 - /star/registry/?level=2"});" data-turbo="false" href="/star/registry/?level=2">STAR Level 2</a></div><div class="c-megamenu__item-description">At level two organizations earn a certification or third-party attestation.</div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"View companies at level two - /star/registry/?level=2"});" data-turbo="false" href="/star/registry/?level=2">View companies at level two</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Learn about level two - /star/#tab_levelTwo"});" href="/star/#tab_levelTwo">Learn about level two</a></div></div></div></div></div></div></div><div class="c-megamenu__category" data-target="#certificates-training-nav"><div class="c-megamenu__anchor">Certificates & Training</div><div class="c-megamenu__category-content" id="certificates-training-nav"><div class="o-container"><div class="o-grid o-grid--small-fit o-grid--medium-fit o-grid--large-fit"><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Online Education Platforms</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Knowledge Center - https://knowledge.cloudsecurityalliance.org"});" href="https://knowledge.cloudsecurityalliance.org">Knowledge Center</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CSA Exams - https://exams.cloudsecurityalliance.org"});" href="https://exams.cloudsecurityalliance.org">CSA Exams</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Events - /events/"});" href="/events/">Events</a></div><div class="c-megamenu__item-description">Learn and network while you earn CPE credits.</div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Virtual Events \u0026 Webinars - /events/virtual-and-webinars/"});" data-turbo="false" href="/events/virtual-and-webinars/">Virtual Events & Webinars</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Event Sponsorships - /sponsor/"});" href="/sponsor/">Event Sponsorships</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certificates - /education/"});" href="/education/">Certificates</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certificate of Cloud Security Knowledge (CCSK) - /education/ccsk/"});" href="/education/ccsk/">Certificate of Cloud Security Knowledge (CCSK)</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certificate of Cloud Auditing Knowledge (CCAK) - /education/ccak/"});" href="/education/ccak/">Certificate of Cloud Auditing Knowledge (CCAK)</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certificate of Competence in Zero Trust (CCZT) - /education/cczt/"});" href="/education/cczt/">Certificate of Competence in Zero Trust (CCZT)</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Digital Badges - /education/digital-badges/"});" href="/education/digital-badges/">Digital Badges</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Trainings - /education/"});" href="/education/">Trainings</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Cloud Infrastructure Security Training - /education/cloud-infrastructure-security-training"});" href="/education/cloud-infrastructure-security-training">Cloud Infrastructure Security Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Lead Auditor Training - /education/star-lead-auditor-training/"});" href="/education/star-lead-auditor-training/">STAR Lead Auditor Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Advanced Cloud Security Practitioner (ACSP) Training - /education/advanced-cloud-security-practitioner-training"});" href="/education/advanced-cloud-security-practitioner-training">Advanced Cloud Security Practitioner (ACSP) Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CCSK Train the Trainer - /education/train-the-trainer/"});" href="/education/train-the-trainer/">CCSK Train the Trainer</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Training Network - /education/partner#become_partner"});" href="/education/partner#become_partner">Training Network</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Become an Instructor - /education/instructors/"});" href="/education/instructors/">Become an Instructor</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Become a Training Partner - /education/training-partners/"});" href="/education/training-partners/">Become a Training Partner</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Specialized Training Options</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Train my entire team - /education/business/"});" href="/education/business/">Train my entire team</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Training for Government Agencies - /education/gsa-schedule/"});" href="/education/gsa-schedule/">Training for Government Agencies</a></div></div></div></div></div></div></div><div class="c-megamenu__category" data-target="#research-nav"><div class="c-megamenu__anchor">Research</div><div class="c-megamenu__category-content" id="research-nav"><div class="o-container"><div class="o-grid o-grid--small-fit o-grid--medium-fit o-grid--large-fit"><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CSA Research - /research/"});" href="/research/">CSA Research</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Latest Research - /research/artifacts"});" href="/research/artifacts">Latest Research</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Working Groups - /research/working-groups/"});" href="/research/working-groups/">Working Groups</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Chapters - /chapters/"});" href="/chapters/">Chapters</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Open Peer Reviews - /research/contribute#peer-reviews"});" href="/research/contribute#peer-reviews">Open Peer Reviews</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Research Topics - /research/topics"});" href="/research/topics">Research Topics</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Strategic Initiatives</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Safety Initiative - /research/working-groups/artificial-intelligence/"});" href="/research/working-groups/artificial-intelligence/">AI Safety Initiative</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Zero Trust Advancement Center - /zt/"});" href="/zt/">Zero Trust Advancement Center</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CxO Trust - /cxo-trust/"});" href="/cxo-trust/">CxO Trust</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Trusted Cloud Consultant - /trusted-cloud-consultant/"});" href="/trusted-cloud-consultant/">Trusted Cloud Consultant</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"FinCloud Security - /fincloud-security"});" href="/fincloud-security">FinCloud Security</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Thought Leadership</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CloudBytes Webinars - /events/virtual-and-webinars/?event_kind=Webinar"});" data-turbo="false" href="/events/virtual-and-webinars/?event_kind=Webinar">CloudBytes Webinars</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Blog - /blog/"});" href="/blog/">Blog</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Getting Started with CSA Research</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Cloud security best practices - /research/guidance/"});" href="/research/guidance/">Cloud security best practices</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Assess your cloud compliance - /research/cloud-controls-matrix/"});" href="/research/cloud-controls-matrix/">Assess your cloud compliance</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Security questionnaire for vendors - /artifacts/star-level-1-security-questionnaire-caiq-v4/"});" href="/artifacts/star-level-1-security-questionnaire-caiq-v4/">Security questionnaire for vendors</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Top threats to cloud computing - /research/working-groups/top-threats/"});" href="/research/working-groups/top-threats/">Top threats to cloud computing</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Cloud Security Glossary - /cloud-security-glossary"});" href="/cloud-security-glossary">Cloud Security Glossary</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Awards & Recognition</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Juanita Koilpillai Awards - /research/juanita-koilpillai/service-award/"});" href="/research/juanita-koilpillai/service-award/">Juanita Koilpillai Awards</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Research Fellows - /research/fellowship#fellows"});" href="/research/fellowship#fellows">Research Fellows</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Critical Topics</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Safety Initiative - /research/working-groups/artificial-intelligence"});" href="/research/working-groups/artificial-intelligence">AI Safety Initiative</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Technology and Risk - /research/working-groups/ai-technology-and-risk"});" href="/research/working-groups/ai-technology-and-risk">AI Technology and Risk</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Governance \u0026 Compliance - /research/working-groups/ai-governance-compliance"});" href="/research/working-groups/ai-governance-compliance">AI Governance & Compliance</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Controls - /research/working-groups/ai-controls"});" href="/research/working-groups/ai-controls">AI Controls</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Organizational Responsibilities - /research/working-groups/ai-organizational-responsibilities"});" href="/research/working-groups/ai-organizational-responsibilities">AI Organizational Responsibilities</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Enterprise Architecture - /research/working-groups/enterprise-architecture"});" href="/research/working-groups/enterprise-architecture">Enterprise Architecture</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Blockchain - /research/working-groups/blockchain"});" href="/research/working-groups/blockchain">Blockchain</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Zero Trust - /research/working-groups/zero-trust"});" href="/research/working-groups/zero-trust">Zero Trust</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"DevSecOps - /research/working-groups/devsecops"});" href="/research/working-groups/devsecops">DevSecOps</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Top Threats - /research/working-groups/top-threats"});" href="/research/working-groups/top-threats">Top Threats</a></div></div></div></div></div></div></div></div><div class="o-grid__cell c-megamenu__search"><form action="/search" class="input-pair u-mb0" method="get" role="search"><label><span class="u-screen-reader">Search for:</span></label><input autocomplete="off" class="c-megamenu__search-input" name="s" placeholder="Search CSA resources, tools, research publications and more…" title="Search for:" type="text" value="" /><button class="c-button c-button--secondary"><i class="fas fa-search"></i></button><div class="c-button c-button--expand"><i class="fas fa-search"></i></div><div class="c-button c-button--close"><div class="i fas fa-times"></div></div></form></div></div></div></div></div><div id="megamenu_mobile"><div class="c-mobile-menu"><div class="c-mobile-menu__head"><a class="c-megamenu__logo" href="/"><img src="/assets/CSA-logo-RGB-a0a3855889ad836fa585d60f6caf8d619f241d43904c304c2f64284127fe9bf3.svg" /></a><span class="c-mobile-menu__search"><a style="color: black" href="/search"><i class="fas fa-search"></i></a></span><span class="c-mobile-menu__hamburger"><i class="fas fa-bars"></i></span></div><div class="o-container c-mobile-menu__body"><div class="c-megamenu__categories"><div class="c-megamenu__category" data-target="#mobile-membership-nav"><div class="c-megamenu__anchor">Membership</div><div class="c-megamenu__category-content" id="mobile-membership-nav"><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Membership Benefits - /membership/"});" href="/membership/">Membership Benefits</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Our Member Community - /membership/current/"});" href="/membership/current/">Our Member Community</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Get Involved - /membership/get-involved/"});" href="/membership/get-involved/">Get Involved</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Become a Member - /membership/contact/"});" href="/membership/contact/">Become a Member</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Member-Exclusive Programs</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Enabled Solutions - /star/registry/star-enabled-solutions/"});" href="/star/registry/star-enabled-solutions/">STAR Enabled Solutions</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Trusted Cloud Consultant - /trusted-cloud-consultant/registry/"});" href="/trusted-cloud-consultant/registry/">Trusted Cloud Consultant</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Trusted Cloud Provider - /trusted-cloud-provider/"});" href="/trusted-cloud-provider/">Trusted Cloud Provider</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certified STAR Auditors - /star/certified-star-auditors/"});" href="/star/certified-star-auditors/">Certified STAR Auditors</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Member Portal - https://cloudsecurityalliance.my.site.com"});" href="https://cloudsecurityalliance.my.site.com">Member Portal</a></div></div></div></div></div><hr /><div class="c-megamenu__category" data-target="#mobile-star-program-nav"><div class="c-megamenu__anchor">STAR Program</div><div class="c-megamenu__category-content" id="mobile-star-program-nav"><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Home - /star/"});" href="/star/">STAR Home</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Registry - /star/registry/"});" data-turbo="false" href="/star/registry/">STAR Registry</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Submit to Registry - /star/submit/"});" href="/star/submit/">Submit to Registry</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Provide Feedback - /star/feedback/"});" href="/star/feedback/">Provide Feedback</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certified STAR Auditors - /star/certified-star-auditors/"});" href="/star/certified-star-auditors/">Certified STAR Auditors</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Enabled Solutions - /star/star-enabled-solutions/overview/"});" href="/star/star-enabled-solutions/overview/">STAR Enabled Solutions</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Stay compliant in the cloud</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CCAK Training - /education/ccak/"});" href="/education/ccak/">CCAK Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Lead Auditor Training - /education/star-lead-auditor-training/"});" href="/education/star-lead-auditor-training/">STAR Lead Auditor Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Training for Government Agencies - /education/gsa-schedule/"});" href="/education/gsa-schedule/">Training for Government Agencies</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Governance, Risk & Compliance Tools</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Cloud Controls Matrix (CCM) - /research/cloud-controls-matrix/"});" href="/research/cloud-controls-matrix/">Cloud Controls Matrix (CCM)</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Consensus Assessment Initiative Questionnaire (CAIQ) - /research/cloud-controls-matrix/"});" href="/research/cloud-controls-matrix/">Consensus Assessment Initiative Questionnaire (CAIQ)</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"EU Cloud Code of Conduct - /gdpr/eu-cloud-code-of-conduct/"});" href="/gdpr/eu-cloud-code-of-conduct/">EU Cloud Code of Conduct</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Level 1 - /star/registry/?level=1"});" data-turbo="false" href="/star/registry/?level=1">STAR Level 1</a></div><div class="c-megamenu__item-description">At level one organizations submit a self-assessment.</div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"View companies at level one - /star/registry/?level=1"});" data-turbo="false" href="/star/registry/?level=1">View companies at level one</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Learn about level one - /star/#tab_levelOne"});" href="/star/#tab_levelOne">Learn about level one</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Level 2 - /star/registry/?level=2"});" data-turbo="false" href="/star/registry/?level=2">STAR Level 2</a></div><div class="c-megamenu__item-description">At level two organizations earn a certification or third-party attestation.</div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"View companies at level two - /star/registry/?level=2"});" data-turbo="false" href="/star/registry/?level=2">View companies at level two</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Learn about level two - /star/#tab_levelTwo"});" href="/star/#tab_levelTwo">Learn about level two</a></div></div></div></div></div><hr /><div class="c-megamenu__category" data-target="#mobile-certificates-training-nav"><div class="c-megamenu__anchor">Certificates & Training</div><div class="c-megamenu__category-content" id="mobile-certificates-training-nav"><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Online Education Platforms</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Knowledge Center - https://knowledge.cloudsecurityalliance.org"});" href="https://knowledge.cloudsecurityalliance.org">Knowledge Center</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CSA Exams - https://exams.cloudsecurityalliance.org"});" href="https://exams.cloudsecurityalliance.org">CSA Exams</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Events - /events/"});" href="/events/">Events</a></div><div class="c-megamenu__item-description">Learn and network while you earn CPE credits.</div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Virtual Events \u0026 Webinars - /events/virtual-and-webinars/"});" data-turbo="false" href="/events/virtual-and-webinars/">Virtual Events & Webinars</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Event Sponsorships - /sponsor/"});" href="/sponsor/">Event Sponsorships</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certificates - /education/"});" href="/education/">Certificates</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certificate of Cloud Security Knowledge (CCSK) - /education/ccsk/"});" href="/education/ccsk/">Certificate of Cloud Security Knowledge (CCSK)</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certificate of Cloud Auditing Knowledge (CCAK) - /education/ccak/"});" href="/education/ccak/">Certificate of Cloud Auditing Knowledge (CCAK)</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certificate of Competence in Zero Trust (CCZT) - /education/cczt/"});" href="/education/cczt/">Certificate of Competence in Zero Trust (CCZT)</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Digital Badges - /education/digital-badges/"});" href="/education/digital-badges/">Digital Badges</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Trainings - /education/"});" href="/education/">Trainings</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Cloud Infrastructure Security Training - /education/cloud-infrastructure-security-training"});" href="/education/cloud-infrastructure-security-training">Cloud Infrastructure Security Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Lead Auditor Training - /education/star-lead-auditor-training/"});" href="/education/star-lead-auditor-training/">STAR Lead Auditor Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Advanced Cloud Security Practitioner (ACSP) Training - /education/advanced-cloud-security-practitioner-training"});" href="/education/advanced-cloud-security-practitioner-training">Advanced Cloud Security Practitioner (ACSP) Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CCSK Train the Trainer - /education/train-the-trainer/"});" href="/education/train-the-trainer/">CCSK Train the Trainer</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Training Network - /education/partner#become_partner"});" href="/education/partner#become_partner">Training Network</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Become an Instructor - /education/instructors/"});" href="/education/instructors/">Become an Instructor</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Become a Training Partner - /education/training-partners/"});" href="/education/training-partners/">Become a Training Partner</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Specialized Training Options</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Train my entire team - /education/business/"});" href="/education/business/">Train my entire team</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Training for Government Agencies - /education/gsa-schedule/"});" href="/education/gsa-schedule/">Training for Government Agencies</a></div></div></div></div></div><hr /><div class="c-megamenu__category" data-target="#mobile-research-nav"><div class="c-megamenu__anchor">Research</div><div class="c-megamenu__category-content" id="mobile-research-nav"><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CSA Research - /research/"});" href="/research/">CSA Research</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Latest Research - /research/artifacts"});" href="/research/artifacts">Latest Research</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Working Groups - /research/working-groups/"});" href="/research/working-groups/">Working Groups</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Chapters - /chapters/"});" href="/chapters/">Chapters</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Open Peer Reviews - /research/contribute#peer-reviews"});" href="/research/contribute#peer-reviews">Open Peer Reviews</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Research Topics - /research/topics"});" href="/research/topics">Research Topics</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Strategic Initiatives</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Safety Initiative - /research/working-groups/artificial-intelligence/"});" href="/research/working-groups/artificial-intelligence/">AI Safety Initiative</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Zero Trust Advancement Center - /zt/"});" href="/zt/">Zero Trust Advancement Center</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CxO Trust - /cxo-trust/"});" href="/cxo-trust/">CxO Trust</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Trusted Cloud Consultant - /trusted-cloud-consultant/"});" href="/trusted-cloud-consultant/">Trusted Cloud Consultant</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"FinCloud Security - /fincloud-security"});" href="/fincloud-security">FinCloud Security</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Thought Leadership</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CloudBytes Webinars - /events/virtual-and-webinars/?event_kind=Webinar"});" data-turbo="false" href="/events/virtual-and-webinars/?event_kind=Webinar">CloudBytes Webinars</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Blog - /blog/"});" href="/blog/">Blog</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Getting Started with CSA Research</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Cloud security best practices - /research/guidance/"});" href="/research/guidance/">Cloud security best practices</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Assess your cloud compliance - /research/cloud-controls-matrix/"});" href="/research/cloud-controls-matrix/">Assess your cloud compliance</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Security questionnaire for vendors - /artifacts/star-level-1-security-questionnaire-caiq-v4/"});" href="/artifacts/star-level-1-security-questionnaire-caiq-v4/">Security questionnaire for vendors</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Top threats to cloud computing - /research/working-groups/top-threats/"});" href="/research/working-groups/top-threats/">Top threats to cloud computing</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Cloud Security Glossary - /cloud-security-glossary"});" href="/cloud-security-glossary">Cloud Security Glossary</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Awards & Recognition</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Juanita Koilpillai Awards - /research/juanita-koilpillai/service-award/"});" href="/research/juanita-koilpillai/service-award/">Juanita Koilpillai Awards</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Research Fellows - /research/fellowship#fellows"});" href="/research/fellowship#fellows">Research Fellows</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Critical Topics</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Safety Initiative - /research/working-groups/artificial-intelligence"});" href="/research/working-groups/artificial-intelligence">AI Safety Initiative</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Technology and Risk - /research/working-groups/ai-technology-and-risk"});" href="/research/working-groups/ai-technology-and-risk">AI Technology and Risk</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Governance \u0026 Compliance - /research/working-groups/ai-governance-compliance"});" href="/research/working-groups/ai-governance-compliance">AI Governance & Compliance</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Controls - /research/working-groups/ai-controls"});" href="/research/working-groups/ai-controls">AI Controls</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Organizational Responsibilities - /research/working-groups/ai-organizational-responsibilities"});" href="/research/working-groups/ai-organizational-responsibilities">AI Organizational Responsibilities</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Enterprise Architecture - /research/working-groups/enterprise-architecture"});" href="/research/working-groups/enterprise-architecture">Enterprise Architecture</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Blockchain - /research/working-groups/blockchain"});" href="/research/working-groups/blockchain">Blockchain</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Zero Trust - /research/working-groups/zero-trust"});" href="/research/working-groups/zero-trust">Zero Trust</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"DevSecOps - /research/working-groups/devsecops"});" href="/research/working-groups/devsecops">DevSecOps</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Top Threats - /research/working-groups/top-threats"});" href="/research/working-groups/top-threats">Top Threats</a></div></div></div></div></div><hr /><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"quick_links_menu","event_label":"Cloud 101 - https://cloudsecurityalliance.org/cloud-newbie"});" href="https://cloudsecurityalliance.org/cloud-newbie">Cloud 101</a><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"quick_links_menu","event_label":"Circle - https://circle.cloudsecurityalliance.org/"});" rel="noopener" target="_blank" href="https://circle.cloudsecurityalliance.org/">Circle</a><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"quick_links_menu","event_label":"Events - https://cloudsecurityalliance.org/events/"});" href="https://cloudsecurityalliance.org/events/">Events</a><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"quick_links_menu","event_label":"Blog - https://cloudsecurityalliance.org/blog/"});" href="https://cloudsecurityalliance.org/blog/">Blog</a><div class="u-pb16"><form class="c-megamenu__anchor" method="post" action="/auth/auth0"><button data-turbo="false" type="submit">Sign In</button><input type="hidden" name="authenticity_token" value="xIBn0XF3yc_DHLCnMMdOSgDJkS4K7o-M48LDUoStCMTjB0k9sTHIrS8Byb6YXPGw3DKUzpimh4bonaYfpBjfgQ" autocomplete="off" /></form></div></div></div></div></div><div class="app_notification o-area o-area--inverse u-centered u-inverse u-pt8 u-pb8 u-bg-color-blue-300" data-controller="record-link-interaction" data-record-link-interaction-action-value="click" data-record-link-interaction-interactable-id-value="293" data-record-link-interaction-interactable-type-value="AppNotification"><small class="u-text-color-white"><div class="trix-content"> <div>Master CSA’s Security, Trust, Assurance, and Risk program—<a href="https://cloudsecurityalliance.org/artifacts/star-prep-kit">download the STAR Prep Kit</a> for essential tools to enhance your assurance!</div> </div> </small></div></header><main class="c-layout-main"><div class="c-container"><div class="o-container"></div></div><div class="o-area o-area--layered o-area--separated o-area--inverse"><div class="o-area__layer u-bg-color-gray-800" style="background-image: url(/assets/research/bg-pattern-6d6e0a0c9e313d11c6da7e34fe557951803291b666e21c4d6a540ca3ccb3a923.png)"></div><div class="o-area__top-layer"><div class="o-container"><h1>Juanita Koilpillai Service Award</h1><h2>Awarded by CSA</h2></div></div></div><div class="o-area"><div class="c-nav"><div class="o-container"><div class="c-nav__item"><a class="c-nav__anchor" href="/research/juanita-koilpillai/service-award/#current">2024 Service Award Recipients</a></div><div class="c-nav__item c-nav__item--parent"><a class="c-nav__anchor" href="/research/juanita-koilpillai/service-award/#2023">Prior Recipients</a><div class="c-nav"><div class="c-nav__item"><a class="c-nav__anchor" href="/research/juanita-koilpillai/service-award/#2024">2024</a></div><div class="c-nav__item"><a class="c-nav__anchor" href="/research/juanita-koilpillai/service-award/#2023">2023</a></div><div class="c-nav__item"><a class="c-nav__anchor" href="/research/juanita-koilpillai/service-award/#2022">2022</a></div><div class="c-nav__item"><a class="c-nav__anchor" href="/research/juanita-koilpillai/service-award/#2021">2021</a></div><div class="c-nav__item"><a class="c-nav__anchor" href="/research/juanita-koilpillai/service-award/#2020">2020</a></div><div class="c-nav__item"><a class="c-nav__anchor" href="/research/juanita-koilpillai/service-award/#2018">2018</a></div><div class="c-nav__item"><a class="c-nav__anchor" href="/research/juanita-koilpillai/service-award/#2017">2017</a></div><div class="c-nav__item"><a class="c-nav__anchor" href="/research/juanita-koilpillai/service-award/#2016">2016</a></div><div class="c-nav__item"><a class="c-nav__anchor" href="/research/juanita-koilpillai/service-award/#2015">2015</a></div><div class="c-nav__item"><a class="c-nav__anchor" href="/research/juanita-koilpillai/service-award/#2014">2014</a></div><div class="c-nav__item"><a class="c-nav__anchor" href="/research/juanita-koilpillai/service-award/#2013">2013</a></div><div class="c-nav__item"><a class="c-nav__anchor" href="/research/juanita-koilpillai/service-award/#2012">2012</a></div></div></div><div class="c-nav__item"><a class="c-nav__anchor" href="/research/juanita-koilpillai/about-juanita">About Juanita</a></div></div></div></div><div class="o-area"><div class="o-container"><div class="c-breadcrumbs"><div class="c-breadcrumbs__item"><a href="/">Home</a></div><div class="c-breadcrumbs__item"><a href="/research">Research</a></div><div class="c-breadcrumbs__item">Juanita Koilpillai Service Award</div></div></div></div><div class="o-area"><div class="b-append-research-top"></div></div><div class="o-area"><div class="o-area o-area--separated o-area--alternating"><div class="o-container"><h2 class="c-heading c-heading--section" id="current">2024 Service Award Recipients</h2><p>The Juanita Koilpillai Award is awarded to CSA members whose contributions reflect Juanita's passion for volunteerism. This award was previously established in 2012 as the Ron Knode Award, and was re-established in 2022 as the Juanita Koilpillai Award.</p><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Ken Huang Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MzIwODgsInB1ciI6ImJsb2JfaWQifX0=--c790b0d6dbc3e81ac30fcac1bae288a8e5208983/ken-huang.png" /></div><div class="o-media"><h3>Ken Huang</h3><h6>Chief AI Officer at DistributedApps.ai</h6><div class="b-limited-content"><p>Ken Huang is an acclaimed author of 8 books on AI and Web3. He is the Co-Chair of the AI Organizational Responsibility Working Group and AI Control Framework at the Cloud Security Alliance. Additionally, Huang serves as Chief AI Officer of DistributedApps.ai, which provides training and consulting services for Generative AI Security.</p><p>In addition, Huang contributed extensively to key initiatives in the space. He is a core contributor to OWASP's Top 10 Risks for LLM Applications and heavily involved in the NIST Generative AI Public Working Group. He also provides feedback on publications like NIST SP 800-226.</p><p>Ken published the book "Generative AI Security: Theories and Practices" with Springer which takes a systematic, principle-based approach to securing generative AI systems. </p><p>Furthermore, his blog post "Mitigating Security Risks in Retrieval Augmented Generation (RAG) LLM Applications" stands as one of the most popular on the Cloud Security Alliance website (<a href="https://cloudsecurityalliance.org/blog/2023/11/22/mitigating-security-risks-in-retrieval-augmented-generation-rag-llm-applications">https://cloudsecurityalliance.org/blog/2023/11/22/mitigating-security-risks-in-retrieval-augmented-generation-rag-llm-applications</a>)</p><p>Beyond his Springer book on Generative AI Security, Huang also serves as chief editor of the book "Beyond AI: ChatGPT, Web3, and the Business Landscape of Tomorrow." This volume discusses the wide-ranging business impacts of innovations like generative AI and web3.</p><p>A sought-after speaker, Ken has shared his insights at renowned global conferences, including those hosted by Davos WEF, ACM, IEEE, and CSA AI Summit, CSA AI Think Tank Day and World Bank. His recent co-authorship of "Blockchain and Web3: Building the Cryptocurrency, Privacy, and Security Foundations of the Metaverse" adds to his reputation, with the book being recognized as one of the must-reads in both 2023 and 2024 by TechTarget.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="MJ Schwenger Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MzY1NjcsInB1ciI6ImJsb2JfaWQifX0=--ee272fea64d655f57c6565d5a333538399b5651b/MJSchwenger.jpg" /></div><div class="o-media"><h3>MJ Schwenger</h3><h6>vCIO/CISO, RCP</h6><div class="b-limited-content"><p>Maria (MJ) Schwenger is a seasoned Information Security Executive. She leverages her deep expertise across cybersecurity, privacy & compliance, AI/Generative AI, cloud modernization, and software development to spearhead transformative digital journeys. Renowned for her leadership in integrating emerging technologies like AI/GenAI, DevSecOps/SRE, Blockchain, IoT/Edge, and cloud-native optimization, she seamlessly unlocks innovative business capabilities. The transformative results of her work demonstrate a substantial increase in ROI, productivity gains, and enhanced business agility.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Sam Pfanstiel Ph.D. Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MzY3MDMsInB1ciI6ImJsb2JfaWQifX0=--04489f65d3d669c7d21c3ccfe8128729af326455/Sam%20Pfanstiel%20headshot.jpeg" /></div><div class="o-media"><h3>Sam Pfanstiel Ph.D.</h3><h6>Principal, Technical Compliance, PCI</h6><div class="b-limited-content"><p>As Principal Analyst at Toast, Sam is responsible for heading the Payment Card Industry (PCI) compliance programs for this cloud-based fintech company. Over the past 27 years, Sam has held key roles in security, technology, and management, and developed expertise in multiple disciplines, including payments, PCI compliance, fraud, cloud service delivery, application development, mobile technology, infrastructure, and cryptography. This diverse knowledge enables him to support the secure implementation of Toast's cloud-based restaurant payment systems, while helping drive efficiency and innovation across their portfolio of hospitality products.<br><br>Sam holds multiple certifications, including CISSP, CISM, CEH, PCIP, and ISA. He is co-chair of the CSA Cloud Key Management Working Group, former chair of the ETA Risk, Fraud, and Security Committee, and remains an active contributor on the PCI Security Standards Council Board of Advisors, Technology Guidance Group, Special Interest Groups, and Task Forces. Sam has had the privilege of speaking at numerous conferences held by PCI SSC, ETA, ICMC, Verifone, ACI, Mastercard, Treasury Institute, MAC, Conexxus, and NACS. In 2022 he received his Ph.D. in management, having published his dissertation on the impacts of retail management perceptions on cybersecurity investment.<br><br>Sam lives in Broomfield, Colorado, where he enjoys trail running, skiing, and training his two dogs. He and his wife, Melinda, have been married for 27 years and have three children.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Shruti Kulkarni Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTE4NjEsInB1ciI6ImJsb2JfaWQifX0=--44f9a3ad8a227b060b924e7297d9aa558c2f098a/Photo.jpeg" /></div><div class="o-media"><h3>Shruti Kulkarni</h3><h6>Information Security Architect, Elexon</h6><div class="b-limited-content"><p>I am a security professional with experience across various domains of security. I work in defining organisation’s security strategy, security architecture and security practices. Translating business objectives and risk management strategies into specific security processes enabled by security technologies and services. I work on gap analysis, design, implementation and maintenance of ISO27001, PCI-DSS and GDPR, including Greenfield implementations.</p><p>I collaborate with cross-functional groups to implement information security controls in software development life-cycle, service operations, service delivery, sales function, HR function and other functions as applicable. </p><p>I provide thought leadership, present results to CXO community and security trends in forums.</p><p>My working roles include security analyst, ISMS auditor, consultant, information security manager, enterprise security architect, volunteer and guest speaker.</p></div></div></div></div></div></div></div><div class="o-area o-area--separated o-area--alternating"><div class="o-container"><h2 class="c-heading c-heading--section" id="2023">2023 Service Award Recipients</h2><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Parthasarathi Chakraborty Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTA3NzEsInB1ciI6ImJsb2JfaWQifX0=--02beff73b295ba6d6c99bc29e58a1f8f5eca2ff0/2b3d0546.jpg" /></div><div class="o-media"><h3>Parthasarathi Chakraborty</h3><h6>Associate VP, Cloud Security, Cyber Innovation and R&D</h6><div class="b-limited-content"><p>Partha has over 20 years of cyber security leadership experience in the financial services and healthcare industry. An active speaker and panelist in major cyber security conferences around the world, and frequently called in for views and interviews in electronic media like The Economist, UK. Very much passionate about learning new technologies and writing on recent groundbreaking cyber trends. He is also the founder of Cloud Security Practitioner Council, a practitioner driven forum to create security guidelines for the industry. Partha sits in the advisory board of few security startups like Oak9, TrueFort and in the Dean's Board at New Jersey Institute of Technology.</p><p>Currently he is heading up security architecture, engineering and cloud for Humana Inc, a Fortune 46 healthcare company. Prior to Humana, Partha held executive leadership roles with Bank of Montreal, JP Morgan Chase, Merrill Lynch, Bank of America, and Guardian Life Insurance Company. A CISSP, CCSP, CEH, CHFI certified security evangelist holding a Bachelor’s degree in engineering from NIT Rourkela, a Masters in Cyber Security from Western Governors University, another Masters in Technology Management from Columbia University, a cyber security professional certificate from Stanford University and executive CTO university credit program from Wharton Business School and University of Pennsylvania. Currently researching security challenges in API, Microservices, Key and posture management space. Partha also has two patents under his name for JP Morgan and Humana Inc.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Masahiro Morozumi Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MzQ0NDgsInB1ciI6ImJsb2JfaWQifX0=--2e5c57e6e47c9d46b410cd2a6ca766f51ad15469/morozumi_newpicture.jpg" /></div><div class="o-media"><h3>Masahiro Morozumi</h3><h6>Executive Director, CSA Japan Chapter</h6><div class="b-limited-content"><p>Masahiro Morozumi is the executive director of CSA Japan Chapter. He is a founding member of CSA Japan Chapter. He has been working for information security, and founded his own consulting firm back in 2014 with the aim to promote Cloud adoptionproviding consultation to SMEs on how to move to Cloud securely. He also participates in different CSA research and works to promote adoption of CSA’s best practices in different Cloud based technologies. Especially for contributing themapping to CCM, joining to translate CSA documents to Japanese, like CSA guidance, CCM, STAR and IoT.</p><p>In addition to the experience of information security, he has an engineering experience for UNIX operating system and Oracle database. He also graduated from The University of Electro-Communications with a Master in Management Engineering.</p><p>Responsible for translation of CSA research artifacts in Japanese; they include:</p><ul><li>Top Threats to Cloud Computing The Egregious 11</li><li>Guideline on Effectively Managing Security Service in the Cloud</li><li>Using Blockchain Technology to Secure the Internet of Things</li><li>Code of Conduct for GDPR Compliance</li><li>The Treacherous 12 – Top Threats to Cloud Computing + Industry Insights</li><li>Security Guidance for Critical Areas of Focus in Cloud Computing v4.0</li><li>Identity and Access Management for the Internet of Things</li></ul><p><strong>Contributions</strong>: Member of CCM, IoT and Guidance Working Groups; contributor to ISO27017 mapping to CCM; managed CSA Japan Summit and Congress; served as Executive Director of the CSA Japan Chapter.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Jason Garbis Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MjE2MjUsInB1ciI6ImJsb2JfaWQifX0=--54deb6808eb78b4a49831c53ddb055f745f544ea/jag-headshot.jpg" /></div><div class="o-media"><h3>Jason Garbis</h3><h6> Founder and Principal at Numberline Security</h6><div class="b-limited-content"><p>Jason Garbis is Founder and Principal at Numberline Security, a consulting firm helping enterprises prepare for, define, and execute on effective Zero Trust security strategies. Jason has authored several books, including Zero Trust Security: An Enterprise Guide, is co-chair of the Zero Trust Working Group at the Cloud Security Alliance, and is a frequent speaker at industry conferences. Jason holds a CISSP certification, has a BS in Computer Science from Cornell, and an MBA from Northeastern. Previously, he served as Chief Product Officer at Appgate, and held roles at security firms including RSA and Aveksa. </p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Urmila Nagvekar Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6NTcxMCwicHVyIjoiYmxvYl9pZCJ9fQ==--ec575d0bff8efb086d9182a4c0b67f5beaf45650/Urmila%20Headshot.jpeg" /></div><div class="o-media"><h3>Urmila Nagvekar</h3><div class="b-limited-content"><p>Urmila Nagvekar is a Certified Information Systems Security Professional (CISSP), with a combined 27 years in Information Technology, Security, and Privacy involving leading Cybersecurity, Information Risk Management, and Data Privacy Programs as business value drivers for Engineering and Geoscience with oil majors.</p><p>She has been actively contributing and presenting topics related to Blockchain Security at CSA’s Blockchain/DLT Working Group. As co-author and Team Lead of DLT Security Controls Checklist Group, a global mix of cybersecurity professionals and blockchain practitioners, she has led the Hyperledger Fabric Architecture Security Review Project and a similar project on the Corda platform as well.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Shruti Kulkarni Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTE4NjEsInB1ciI6ImJsb2JfaWQifX0=--44f9a3ad8a227b060b924e7297d9aa558c2f098a/Photo.jpeg" /></div><div class="o-media"><h3>Shruti Kulkarni</h3><h6>Information Security Architect, Elexon</h6><div class="b-limited-content"><p>I am a security professional with experience across various domains of security. I work in defining organisation’s security strategy, security architecture and security practices. Translating business objectives and risk management strategies into specific security processes enabled by security technologies and services. I work on gap analysis, design, implementation and maintenance of ISO27001, PCI-DSS and GDPR, including Greenfield implementations.</p><p>I collaborate with cross-functional groups to implement information security controls in software development life-cycle, service operations, service delivery, sales function, HR function and other functions as applicable. </p><p>I provide thought leadership, present results to CXO community and security trends in forums.</p><p>My working roles include security analyst, ISMS auditor, consultant, information security manager, enterprise security architect, volunteer and guest speaker.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Lars Ruddigkeit Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MjI2NDgsInB1ciI6ImJsb2JfaWQifX0=--0611c6007857c2133198ab8ceba8c36195cb0dff/AnnoucementLars.jpg" /></div><div class="o-media"><h3>Lars Ruddigkeit</h3><h6>Account Technology Strategist, Swiss FedGov</h6><div class="b-limited-content"><p>Lars Ruddigkeit completed his PhD in Chemistry at the University of Bern in 2013 with a focus on computer-aided drug design. He began his professional career at Accenture in technology consulting in Big Data and Data Science. At UBS, he specialized in operational machine learning and cybersecurity as a machine learning architect in the Financial Service industry. He is a contributor to the Cloud Security Alliance working groups for Zero Trust and Artificial Intelligence. He is currently responsible for the Swiss state as Account Technology Strategist at Microsoft Switzerland.</p><p>His Expertise compromises Artificial Intelligence, Adversarial Machine Learning, Compliance, Cloud, and Cybersecurity.</p></div></div></div></div></div></div></div><div class="o-area o-area--separated o-area--alternating"><div class="o-container"><h2 class="c-heading c-heading--section" id="2022">2022 Service Award Recipients</h2><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Jyoti Ponnapalli Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTI0NTcsInB1ciI6ImJsb2JfaWQifX0=--3e055e4a86f22a00f106a233cd1663fbb0d606cc/JyotiPonnapalli-headshot-0019.jpg" /></div><div class="o-media"><h3>Jyoti Ponnapalli</h3><div class="b-limited-content"><p>Jyoti Ponnapalli is the SVP, Head of Blockchain Innovation Strategy at Truist. She has more than 18 years of experience leading emerging technology and complex digital transformations for fortune 500 companies across a range of industries including Finance, Telecom, Airline, Energy, and Food & Beverage. Prior to joining Truist, she was a Director of Blockchain at DTCC leading strategic initiatives in support of efforts to modernize the financial industry post-trade market infrastructure such as optimizing the trade settlement cycle from T+2 to T+0 as well as tokenizing securities for private capital markets. In addition to Fintech, she has also delivered strategic solutions and roadmaps for Value Chain using Blockchain for Retail supply chains, Chemical and Energy Industries.<br><br></p><p>Jyoti holds an Executive M.S. in Technology Management from Columbia University, New York, and a Bachelor of Science, Statistics, and Operations Research degree from the University of Mumbai.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Michael Roza Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc3NCwicHVyIjoiYmxvYl9pZCJ9fQ==--2ee3c93fe3c1fbe44c00209688a02592cb8f251c/roza.jpg" /></div><div class="o-media"><h3>Michael Roza</h3><h6>Risk, Audit, Control and Compliance Professional at EVC</h6><div class="b-limited-content"><p>Since 2012, Michael Roza has been a pivotal member of the Cloud Security Alliance (CSA) family. He has contributed to over 125 projects, as a Lead Author or Author/Contributor and many more as a Reviewer/Editor.</p><p>Michael's extensive contributions encompass critical areas including Artificial Intelligence, Zero Trust/Software Defined Perimeter, Internet of Things, Top Threats, Cloud Control Matrix, DevSecOps, and Key Management. His leadership at CSA has included co-chairing working groups such as Top Threats, Enterprise Architecture, and Security-as-a-Service, as well as co-leading ZT Pillar 5, Network/Environment, where he has played a significant role in advancing cloud security practices.</p><p>In addition to his research, Michael has been instrumental in developing CSA's certifications, including the CCAK, CCSK, and CCZT. He has authored and edited each certification's Body of Knowledge, along with the corresponding certification exams. Beyond this, Michael has contributed to the development of over 20 micro-courses, many of which are based on CSA publications to which he also contributed.</p><p>Michael's dedicated efforts have earned him the prestigious Juanita Koilpillai Service Award in 2018, 2020, 2021, and 2022, as well as the CSA's highest award the CSA Research Fellowship Award in 2021.</p><p>With over 20 years of experience in risk, audit, control, and compliance, Michael has worked with major organizations such as Bridgestone EMEA, Komatsu International, Mitsui Novus International, Johnson & Johnson Inc., and Baxter Inc. He has also collaborated with startups across sectors including network management, contact center software, disk manufacturing, and radiological cancer treatment. In leadership roles, he has transformed risk management and internal audit functions, managed complex SAP transformation and configuration projects, and strengthened compliance through robust IT general controls and segregation of duties frameworks.</p><p>Michael has also served as a secretary or observer on key committees focused on internal audit, risk management, corporate governance, information security, and corporate social responsibility, further establishing himself as an advocate for governance and compliance.</p><p>His professional certifications include Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), and Certified Internal Auditor (CIA). He has also attained the CSA’s Cloud Security Knowledge v5 (CCSKv5) and CSA Cloud Zero Trust v5 (CCZTv1) certifications. Michael holds an AEMBA from Claremont College’s Peter Drucker Center and an MBA from DePaul University.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Satyavathi Divadri Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTI0MzYsInB1ciI6ImJsb2JfaWQifX0=--a2a5126faa38df781b530af3c4e02f5de143b513/satya_BIO.png" /></div><div class="o-media"><h3>Satyavathi Divadri</h3><div class="b-limited-content"><p>With over 24 years of experience in IT and cyber security across various business sectors that include BFSI, Telecom,BPO, Media, and IT/ITSE, Satya is the go-to person for critical security projects. She is the Global head of enterprise security architecture and Cloud CTO at CyberRes, a Micro Focus line of business. She also serves on the board of nonprofit organization i.e., Chairman of Cloud Security Alliance, Bangalore, Global Advisory Board Member - CTIA at EC-Council.</p><p>She is an inventor, a thought leader, a noted speaker in international and national forums, and has been recognized as Top 10 Women Tech Leaders in India, Top 20 Indian Women Security Influencer, Women in Tech - Chief Mentor, and more. </p><p>Being a continuous learner, She is currently pursuing a Ph. D in Cyber Security and holds a variety of certifications. A few key ones to quote are AWS Cloud Solution Architect Associate, CFE, CIPT, TOGAF, PMP, and CISSP*.</p><p>She is a working mother blessed with two sons and lives with a big supporting family. She loves reading, traveling, and making friends.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Alexander Getsin Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MjM4NjcsInB1ciI6ImJsb2JfaWQifX0=--83c659f0e9a64a9bf6d6fb484a2da2e8303980ea/DSC_9552b-3_face%5B20545%5D.jpg" /></div><div class="o-media"><h3>Alexander Getsin</h3><div class="b-limited-content"><p>Alexander Stone Getsin is a financial technologies security leader with particular expertise and interest in cloud security, secure application design, and security governance. Alex is the lead author of industry security best practices, particularly with the Cloud Security Alliance, Top Threats research group, and the (ISC)2 Israeli Chapter, which he helps champion as a co-chairman. Alex leverages a decade of experience in finance, military, technology, and cyber intelligence sectors in his current role as CISO at RiseUP. Alex is an alumnus of the IDF technical academic program, having served in the prestigious cyber and computing MAMRAM unit, a certified CISSP and PMP.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Martim Taborda Barata Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTI0MzQsInB1ciI6ImJsb2JfaWQifX0=--8d309ccf8b1831a5f4f06b7035b9bcb98e7432b9/Martim_Taborda%20Barata.jpg" /></div><div class="o-media"><h3>Martim Taborda Barata</h3><div class="b-limited-content"><p>Martim is a Partner at ICTLC – an international law firm specializing in information and communication technology, privacy, data protection/security, and intellectual property law – having accumulated over 5 years of practical experience in these areas throughout his career. His primary focus is managing privacy and data protection compliance strategies for multinational clients (including organizations in the courier and mail delivery, fintech, banking, healthcare, payroll processing, compliance attestation, IT service provision, software development, cloud computing, food confection, and retail sectors), EU institutions and international organizations (notably in the humanitarian sector), as well as local subsidiaries and public institutions in Portugal (given that he is also a qualified Portuguese lawyer). As needed, he further advises these clients on ad hoc privacy/data protection matters, as well as on a range of related legal domains, notably intellectual property, IT, consumer, and gaming law. Martim further supports local start-ups and smaller companies (particularly software and video game developers) on the same topics, seeking to help them understand their rights and push back against unfair or misleading proposals from stronger counterparties. Together with other colleagues at ICTLC, he played an important role in drafting and revising the current CSA Code of Conduct for GDPR Compliance and continues to assist CSA on the Code by providing support in the management of CSP self-attestations, as well as collaborating with CSA’s Privacy Level Agreement Working Group (PLA WG) to further develop the Code.</p></div></div></div></div></div></div></div><div class="o-area o-area--separated o-area--alternating"><div class="o-container"><h2 class="c-heading c-heading--section" id="2021">2021 Service Award Recipients</h2><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Dr. Ricci Ieong Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6NTI0NywicHVyIjoiYmxvYl9pZCJ9fQ==--ecfd33d351bdddc431291ad4e9c96318238407ad/Ricci-Leong.png" /></div><div class="o-media"><h3>Dr. Ricci Ieong</h3><div class="b-limited-content"><p>Dr Ricci Ieong is the principal consultant of eWalker Consulting (HK) Ltd. and has over 20 years of industry experience in information technology, as well as more than 17 years of experience in IT security, where he specializes in security risk assessment, IT audit, penetration testing, and computer forensics investigation. He is the former vice chairman of professional development of Cloud CSA (HK & Macau Chapter) and has served on the CSA Cloud Incident Response Working Group. He is an active speaker at numerous security events, including CSA summits, in Hong Kong and throughout APAC, as well as being a qualified Certificate of Cloud Security Knowledge (CCSK) instructor and grandfathered to teach the Certificate of Cloud Auditing Knowledge (CCAK). Additionally, he is an adjunct assistant professor at a Hong Kong university, a program director in HKUSpace for the Digital Forensics Diploma course, and an authorized ISC2 Certified Cloud Security Professional (CCSP).</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Juan Perez-Etchegoyen Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MjUxMzksInB1ciI6ImJsb2JfaWQifX0=--0f1b9aaf0d6a082aa997a8bbdc780f78e8f52570/_ECH6564_reduced.jpg" /></div><div class="o-media"><h3>Juan Perez-Etchegoyen</h3><div class="b-limited-content"><p><em>As CTO and co-founder of Onapsis, JP leads the innovation and research teams that keeps Onapsis on the cutting edge of the Business-Critical Application Security market, addressing some of the most complex problems that organizations are currently facing while managing and securing their ERP landscapes. JP helps manage the development of new products as well as support the ERP cybersecurity research efforts that have garnered critical acclaim for the Onapsis Research Labs.</em></p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Michael Roza Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc3NCwicHVyIjoiYmxvYl9pZCJ9fQ==--2ee3c93fe3c1fbe44c00209688a02592cb8f251c/roza.jpg" /></div><div class="o-media"><h3>Michael Roza</h3><h6>Risk, Audit, Control and Compliance Professional at EVC</h6><div class="b-limited-content"><p>Since 2012, Michael Roza has been a pivotal member of the Cloud Security Alliance (CSA) family. He has contributed to over 125 projects, as a Lead Author or Author/Contributor and many more as a Reviewer/Editor.</p><p>Michael's extensive contributions encompass critical areas including Artificial Intelligence, Zero Trust/Software Defined Perimeter, Internet of Things, Top Threats, Cloud Control Matrix, DevSecOps, and Key Management. His leadership at CSA has included co-chairing working groups such as Top Threats, Enterprise Architecture, and Security-as-a-Service, as well as co-leading ZT Pillar 5, Network/Environment, where he has played a significant role in advancing cloud security practices.</p><p>In addition to his research, Michael has been instrumental in developing CSA's certifications, including the CCAK, CCSK, and CCZT. He has authored and edited each certification's Body of Knowledge, along with the corresponding certification exams. Beyond this, Michael has contributed to the development of over 20 micro-courses, many of which are based on CSA publications to which he also contributed.</p><p>Michael's dedicated efforts have earned him the prestigious Juanita Koilpillai Service Award in 2018, 2020, 2021, and 2022, as well as the CSA's highest award the CSA Research Fellowship Award in 2021.</p><p>With over 20 years of experience in risk, audit, control, and compliance, Michael has worked with major organizations such as Bridgestone EMEA, Komatsu International, Mitsui Novus International, Johnson & Johnson Inc., and Baxter Inc. He has also collaborated with startups across sectors including network management, contact center software, disk manufacturing, and radiological cancer treatment. In leadership roles, he has transformed risk management and internal audit functions, managed complex SAP transformation and configuration projects, and strengthened compliance through robust IT general controls and segregation of duties frameworks.</p><p>Michael has also served as a secretary or observer on key committees focused on internal audit, risk management, corporate governance, information security, and corporate social responsibility, further establishing himself as an advocate for governance and compliance.</p><p>His professional certifications include Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), and Certified Internal Auditor (CIA). He has also attained the CSA’s Cloud Security Knowledge v5 (CCSKv5) and CSA Cloud Zero Trust v5 (CCZTv1) certifications. Michael holds an AEMBA from Claremont College’s Peter Drucker Center and an MBA from DePaul University.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Paul Rich Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6NzkzMSwicHVyIjoiYmxvYl9pZCJ9fQ==--49ab9d9a043a4321a2b90e05ee8c74a3f7ce16be/asdf.png" /></div><div class="o-media"><h3>Paul Rich</h3><h6>Executive Director, Data Management & Protection</h6><div class="b-limited-content"><p>Paul Rich is the executive director, data management and protection for JPMorgan Chase & Co., where he leads the strategy and implementation within the company for unstructured data protection both in the cloud and on-premises. He is the co-chair of the CSA Cloud Key Management Working Group, which he envisions as a means of hearing diverse perspectives on the use of cloud services and expectations for both data privacy and securit</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Shawn Harris Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6OTQ5LCJwdXIiOiJibG9iX2lkIn19--34aeba7e7c4debd6cc8e46146e549af28e06078c/shawn-harris.jpg" /></div><div class="o-media"><h3>Shawn Harris</h3><h6>Director of Information Security</h6><div class="b-limited-content"><p>With more than 25 years of information security experience, Shawn Harris is currently the Director of Information Security at Starbucks Coffee Company. His background includes engineering, architecture, and executive responsibilities. Shawn is currently co-chair of the CSA Cloud Controls Matrix working group, where he led efforts to develop the Cloud Control Matrix 4.0. Additionally, he has served on CSA’s Consensus Assessments (CAIQ) and Enterprise Architecture working groups and has contributed material for ISC2 CISSP, ISSAP, and Certified Cloud Security Professional examinations. Further, he has served on the NIST Cloud Computing Security and IETF JOSE working groups.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Claudius Lam Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6NTI0OCwicHVyIjoiYmxvYl9pZCJ9fQ==--1f589790458e706b43bd2093139e5b7379c0cde2/1517427505048.jpg" /></div><div class="o-media"><h3>Claudius Lam</h3><div class="b-limited-content"><p>Claudius Lam is the marketing manager for Trend Micro, responsible for addressing the security challenges of enterprises by connecting market problems with Trend Micro’s solution and service offerings. He served as the chairman of CSA’s Hong Kong & Macau Chapter from 2015 to 2020, and today hosts monthly networking sessions to build awareness of CSA among the local community. He has organized several CSA CxO roundtables and hosted a CloudSEC talk in Hong Kong with CSA Federal Director Katie Lewin. Lam is continuously working to promote CSA and enlist Hong Kong companies as corporate members. A marketing and communication professional, Lam has been involved in information technology for more than 25 years.</p></div></div></div></div></div></div></div><div class="o-area o-area--separated o-area--alternating"><div class="o-container"><h2 class="c-heading c-heading--section" id="2020">2020 Service Award Recipients</h2><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Dr. Jim Angle Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc3MiwicHVyIjoiYmxvYl9pZCJ9fQ==--d6eea55aaddc9f5471c35924ee4b5094967d360b/angle.jpg" /></div><div class="o-media"><h3>Dr. Jim Angle</h3><div class="b-limited-content"><p>Jim has dedicated hundreds of hours to CSA and was instrumental in reviving CSA’s<a href="https://cloudsecurityalliance.org/research/working-groups/health-information-management/"> Health Information Management </a>working group. In doing so, he drafted the group’s first charter and went on to become its co-chair. In this role, he authored three papers — Managing the Risk for Medical Devices Connected to the Cloud, Telehealth in the Cloud, and Healthcare Big Data in the Cloud — and serves as the working group's representative on the CSA <a href="https://cloudsecurityalliance.org/isc/">International Standardization Council</a>. Jim spoke at the CSA Summit/ISC2 Congress in Orlando in 2019. Additionally, he authored a paper currently under consideration by CSA’s Blockchain working group. He is the manager of Network Security - Vulnerability Management at Trinity Health and has a doctorate in business administration with a specialization in computer and information security. He has over 25 years of experience in multiple areas of IT, culminating as the Deputy CIO for an army hospital, and more than 19 years of information security experience in both government service and the private sector.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Dr. Yale Li Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc3MCwicHVyIjoiYmxvYl9pZCJ9fQ==--6eba67162f1ed581ac52f62f980b4427d86b8d82/yale-li.jpg" /></div><div class="o-media"><h3>Dr. Yale Li</h3><div class="b-limited-content"><p>Yale Li was a Microsoft’s Principal Security Architect responsible for data security, applications development security, and emerging market security in SAFE-T (Security Accelerator for Emerging Technologies) team. Yale was Graduate Education Partner at the Center of Information Assurance and Cyber Security at the University of Washington, and CEO’s Advisor of multiple Microsoft partner companies. As a security professional, Yale worked on corporate security strategy, security aspects of emerging technologies such as cloud computing, mobile computing and big data, and emerging markets such as China. In his 14 years at Microsoft, Yale served as Windows source code manager, Tools development lead, and Web Platform chief engineer and other various positions in a number of Microsoft divisions. He completed secure cloud adoption, Windows engineering excellence, shared source delivery, He came to Microsoft from IBM in Canada where he was the Chief Technology Architect.</p><p>Yale Li has been volunteering for the CSA since 2010. He is Chairman of CSA Greater China Region and its Security Coordinating Body. Previously, he served as the Chief Strategy Ambassador and Strategy Advisor for CSA Global, CISO Submit Program Committee Member for CSA APAC, Board Member & Research Director for CSA Seattle Chapter, and Lead/Member for several CSA Workgroups. He is one of the earliest CCSK credential holders. Yale is a global security thought leader in both industry and academia. With a focus on European governments and telecommunications companies, he has provided technical leadership at Huawei in China since late 2014 as the Chief Cyber Security Expert (VP Level) to cover cyber security evaluation, international CSO, cloud computing and CEO advisory roles.</p><p>Yale is Senior Fellow & Adjunct Professor at Xi’an Jiaotong University and a Visiting Professor at Nanjing University of Telecommunications & Posts. He was also Ph.D. Supervisor at the University of Washington, Honorary Professor at Peking University, and a Visiting Scholar at Beihang University. He was the ICCSM Programme Chairman, RecordsInTheCloud.Org Collaborator, and advisor/speaker for several government agencies and labs such as US NISTand China CEPREI Certification Body. Yale had background in Physics as a research assistant to CERN’s Nobel Prize and Rutherford Medal laureates. He has also authored several books and many articles and large number of enterprise software development, deployment, and management.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Dr. Vrettos Moulos Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6NDE5OSwicHVyIjoiYmxvYl9pZCJ9fQ==--9ac256a71bf6ec318b3bc0bf67e2da5171158024/Vrettos_Moulos-a39adb8b8d03390bed5437695a54e81a.png" /></div><div class="o-media"><h3>Dr. Vrettos Moulos</h3><div class="b-limited-content"><p>Dr. Vrettos Moulos is a senior research software engineer in Institute of Communication and Computer Systems in Greece. He holds a PhD in secure microservice architecture patterns from the School of Electrical and Computer Engineering of the National Technical University of Athens (NTUA).</p><p>He has been a member, for more than 10 years, of software development teams creating mission critical applications (rule-based decision systems, secure microservice architectures, big data analytic frameworks etc.). Having worked in different roles (developer, technical coordinator, team leader and architect) in different EU projects (4caast, DITAS, LeanBigData, SocIoS, CoherentPaaS, Orbit) he knows every detail of the information security lifecycle process. In the aforementioned projects, he has also written numerous industrial and scientific articles, published in various scientific journals. His main research interests lie around core topics in Big Data and secure practices that can simplify the implementation of complex models. Also, he has a particular interest in using both on-premise and cloud resources to enable tailored made solutions for AI applications. He contributes to the Cloud Security Alliance’s Serverless, Application Containers and Microservices, and Cloud Key Management Working Groups.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Jim De Haas Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6NTA0MCwicHVyIjoiYmxvYl9pZCJ9fQ==--c4a7e3009c0e3fe3aea606c39a56bbbc6346189d/jim%20de%20haas.jpg" /></div><div class="o-media"><h3>Jim De Haas</h3><h6>Cloud Security Expert</h6><div class="b-limited-content"><p>Seasoned security professional with a demonstrated history of working on critical, complex and highly available banking applications. A technology enthusiast, who enjoys collaborating with cross-functional teams. A strong communicator who can evangelize security across the organisation. Specialised in Cloud Security (Both AWS and Azure), IT Security, training DevOps engineers in security topics and making security understandable to non-security/non-technical people. Inventor and creator of the Cloud Octagon Model (and board game) for risk assessments.</p><p>Secretary of the ABN AMRO global cloud governance board, for the past five years. For the past years I have been presenting at European conferences on the topic of cloud risk assessments. Former advisory board member of the EU SEC project for continous cloud auditing and monitoring. Experienced in leading teams of security professionals.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Michael Roza Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc3NCwicHVyIjoiYmxvYl9pZCJ9fQ==--2ee3c93fe3c1fbe44c00209688a02592cb8f251c/roza.jpg" /></div><div class="o-media"><h3>Michael Roza</h3><h6>Risk, Audit, Control and Compliance Professional at EVC</h6><div class="b-limited-content"><p>Since 2012, Michael Roza has been a pivotal member of the Cloud Security Alliance (CSA) family. He has contributed to over 125 projects, as a Lead Author or Author/Contributor and many more as a Reviewer/Editor.</p><p>Michael's extensive contributions encompass critical areas including Artificial Intelligence, Zero Trust/Software Defined Perimeter, Internet of Things, Top Threats, Cloud Control Matrix, DevSecOps, and Key Management. His leadership at CSA has included co-chairing working groups such as Top Threats, Enterprise Architecture, and Security-as-a-Service, as well as co-leading ZT Pillar 5, Network/Environment, where he has played a significant role in advancing cloud security practices.</p><p>In addition to his research, Michael has been instrumental in developing CSA's certifications, including the CCAK, CCSK, and CCZT. He has authored and edited each certification's Body of Knowledge, along with the corresponding certification exams. Beyond this, Michael has contributed to the development of over 20 micro-courses, many of which are based on CSA publications to which he also contributed.</p><p>Michael's dedicated efforts have earned him the prestigious Juanita Koilpillai Service Award in 2018, 2020, 2021, and 2022, as well as the CSA's highest award the CSA Research Fellowship Award in 2021.</p><p>With over 20 years of experience in risk, audit, control, and compliance, Michael has worked with major organizations such as Bridgestone EMEA, Komatsu International, Mitsui Novus International, Johnson & Johnson Inc., and Baxter Inc. He has also collaborated with startups across sectors including network management, contact center software, disk manufacturing, and radiological cancer treatment. In leadership roles, he has transformed risk management and internal audit functions, managed complex SAP transformation and configuration projects, and strengthened compliance through robust IT general controls and segregation of duties frameworks.</p><p>Michael has also served as a secretary or observer on key committees focused on internal audit, risk management, corporate governance, information security, and corporate social responsibility, further establishing himself as an advocate for governance and compliance.</p><p>His professional certifications include Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), and Certified Internal Auditor (CIA). He has also attained the CSA’s Cloud Security Knowledge v5 (CCSKv5) and CSA Cloud Zero Trust v5 (CCZTv1) certifications. Michael holds an AEMBA from Claremont College’s Peter Drucker Center and an MBA from DePaul University.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Jon-Michael Brook Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MjQyMTQsInB1ciI6ImJsb2JfaWQifX0=--a7375654b40b8faf0196d2525ed503f465a8aabb/Jon-Michael_Brook_1676316333698001Ti4g_1676328890534001qP6z.jpeg" /></div><div class="o-media"><h3>Jon-Michael Brook</h3><div class="b-limited-content"><p>Jon-Michael C. Brook is a certified, 25-year practitioner of cybersecurity, cloud, and privacy. He is the principal contributor to certification sites for privacy and cloud security, and has published books on privacy. Jon-Michael received numerous awards and recognition during his time with Raytheon, Northrop Grumman, Symantec, and Starbucks. He holds patents and trade secrets in intrusion detection, GUI design, and semantic data redaction. He is recognized as a Research Fellow with the Cloud Security Alliance and currently co-chairs the CSA’s Top Threats to Cloud Security and Enterprise Architecture Working Groups. Jon-Michael is a certified trainer for the CSA's Cloud Security (CCSK+) and Cloud Governance (CGC), teaching the CCSK+ training at RSAC, Black Hat, and ISC2 conferences.</p><p><strong>Contributions</strong>: Top Threats Working Group co-chair, Cloud Broker Working Group co-chair and contributor to several additional working groups. Certified Certificate of Cloud Security Knowledge+ (CCSK+) trainer and Cloud Controls Matrix (CCM) reviewer.<br></p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Aradhna Chetal Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mjk4NiwicHVyIjoiYmxvYl9pZCJ9fQ==--4a1c1c92f6ff5f1eb762178fb6d713154730fc90/Aradhna.JPG" /></div><div class="o-media"><h3>Aradhna Chetal</h3><h6>Senior Director Executive- Cloud Security</h6><div class="b-limited-content"><p>Aradhna serves as a Senior Director Executive- Cloud Security at TIAA, a financial services company. She is responsible for the cloud security vision, strategy, standards, security patterns for a multi-cloud hybrid enterprise and engineer security solutions, to support the vision. Aradhna has worked in various Cybersecurity leadership roles at JP Morgan Chase, Boeing Company, Microsoft & T-Mobile.</p><p>Aradhna is an active member in the cyber security industry. She is Co-Chair of Cloud Native Computing Foundation Security TAG, Co-Chair for CSA Serverless Working group and a Cloud Security Alliance Research Fellow; Contributing to CNCF, Cloud Security Alliance and NIST Cloud computing standards, Aradhna has influenced best practices & standards for cloud, containers and micro services security. She has also been providing expert guidance to a number of startups on security product roadmaps and feature development especially, in the area of Identity & Access Management, Zero Trust and Container Security etc.</p><p>Aradhna has a Master's in Cybersecurity, a Bachelor's in Electrical Engineering, a CISSP and CCSP from <a href="https://www.isc2.org/">ISC2.org</a>. Outside of work, Aradhna enjoys hiking, snow shoeing and volunteering for women's causes.</p><p><strong></strong><br></p></div></div></div></div></div></div></div><div class="o-area o-area--separated o-area--alternating"><div class="o-container"><h2 class="c-heading c-heading--section" id="2018">2018 Service Award Recipients</h2><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Angela Dogan Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc3NywicHVyIjoiYmxvYl9pZCJ9fQ==--44fc628674507c99f7391c950a84053bfdfbbfbb/angela-dogan-e2ab911e48e95eacc31382f0725d1868.jpg" /></div><div class="o-media"><h3>Angela Dogan</h3><h6> Director, Vendor Risk Management and Compliance Services, Lynx Technology Partners</h6><div class="b-limited-content"><p>Angela Dogan is the Director, Vendor Risk Management and Compliance Services for Lynx Technology Partners. Previously, she served as Senior Project Manager for the Santa Fe Group and Vendor Auditor for Resurgent Capital Services.</p><p>With 15 years in the financial services industry, she is well-versed in standardized control frameworks such as those created by the Shared Assessments Program and Cloud Security Alliance, where she is a member of the Cloud Controls Matrix (CCM) Working Group. Her expertise in the implementation and execution of third-party risk management programs has kept the Shared Assessments Program at the cutting edge of the industry’s best practice. Dogan is a Shared Assessments Program Steering Committee member and chair of the Standardized Control Assessment (SCA) Committee.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Jason Garbis Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MjE2MjUsInB1ciI6ImJsb2JfaWQifX0=--54deb6808eb78b4a49831c53ddb055f745f544ea/jag-headshot.jpg" /></div><div class="o-media"><h3>Jason Garbis</h3><h6> Founder and Principal at Numberline Security</h6><div class="b-limited-content"><p>Jason Garbis is Founder and Principal at Numberline Security, a consulting firm helping enterprises prepare for, define, and execute on effective Zero Trust security strategies. Jason has authored several books, including Zero Trust Security: An Enterprise Guide, is co-chair of the Zero Trust Working Group at the Cloud Security Alliance, and is a frequent speaker at industry conferences. Jason holds a CISSP certification, has a BS in Computer Science from Cornell, and an MBA from Northeastern. Previously, he served as Chief Product Officer at Appgate, and held roles at security firms including RSA and Aveksa. </p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Dr. Kai Chen Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTE1OSwicHVyIjoiYmxvYl9pZCJ9fQ==--71284fc4b5db49b0250323ce605e64e7acd8e4ac/dr-kai-chen.jpg" /></div><div class="o-media"><h3>Dr. Kai Chen</h3><div class="b-limited-content"><p>Dr. Kai Chen is now serving as the Cybersecurity Ecosystem Specialist of Huawei Technologies Co.,Ltd., is responding for Huawei cybersecurity ecosystem development including strategy, policy and partner engagement, etc. He has over 15 years work experience in applied cryptography, information and network security technical research, standard development, policy and regulation fields; published over 20 research papers and delivered speeches in security related conferences and seminars; developed or co-developed over 10 security standards in wireless communication, DRM and trusted computing; led several information security policy and legislation research projects. He co-founded the GCRF(Great China Regional Forum) of TCG(Trusted Computing Group) and served as co-chair of the GCRF from 2008 through 2015 driving the TPM2.0 standard development and industrialization; co-founded the cybersecurity working group in USITO(United State Information Technology Office) and co-chaired the WG from 2007 through 2015 leading the dialogue and collaboration around cybersecurity policy, regulation and standard development in ICT area. Before joint Huawei, he worked for Microsoft, Intel China and Bell Labs Research China, Lucent Technologies. He is the senior member of China Computer Federation and Chinese Association for Cryptologic Research. Kai holds the Bachelor Degree in Management Engineer, Master Degree in Computer Science and Doctor Degree in Cryptography. </p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Dr. Sak Segkhoonthod Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc3OCwicHVyIjoiYmxvYl9pZCJ9fQ==--37192e335ab77101aa061f0b88aa839042303de7/sak-segkhoonthod-02ad62d4059ba059624af75535b2d799.jpg" /></div><div class="o-media"><h3>Dr. Sak Segkhoonthod</h3><h6>President and CEO, Digital Government Agency</h6><div class="b-limited-content"><p>Dr. Sak Segkhoonthod is the president and CEO for the Digital Government Agency (formerly the Electronic Government Agency), the agency in charge of providing GIN, G-Cloud and other IT services to Thailand’s government agencies. He received a PhD in Electronic System Engineering from Essex University. After graduating, he joined the National Electronic and Computer Technology Center as a researcher at the Network Technology Lab, where he was responsible for projects such as the Information Super Highway Testbed and the Government Information Technology Services (GITS). At GITS, he was in charge of setting IT infrastructure for government agencies such as the Government Information Network.</p><p>Dr. Sak has served as the CSA Thailand Chapter’s chairman since its formation. His leadership has enabled the Thai chapter to be active in getting the government cloud to be STAR-certified and has led the way for the private sector to follow suit. The chapter also organizes the popular annual CSA Thai Summit.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Paolo Balboni Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTMwMywicHVyIjoiYmxvYl9pZCJ9fQ==--227a58302e3dfd81a0c9598d102c7d26bf4dcf2f/paolo-balboni.jpg" /></div><div class="o-media"><h3>Paolo Balboni</h3><div class="b-limited-content"><p>Founding Partner of ICT Legal Consulting, President of the European PrivacyAssociation Professor of Privacy, Cybersecurity, and IT Contract Law at theEuropean Centre on Privacy and Cybersecurity (ECPC) within the Maastricht University Faculty of Law.</p><p>Paolo Balboni (qualified lawyer admitted to the Milan Bar) is a FoundingPartner of ICT Legal Consulting (ICTLC),a law firm with offices in Milan, Bologna, Rome, an International Desk inAmsterdam, and multiple Partner Law Firms around the world. Together with his team he advises clients in the fields of Personal Data Protection, also acting as Data Protection Officer in outsourcing, Data Security,Information and Communication Technology (ICT) and Intellectual PropertyLaw. Paolo has considerable experience in Information Technologies including Cloud Computing, Big Data, Analytics and the Internet of Things,Media and Entertainment, Healthcare, Fashion, Automotive, Insurance,Banking, Anti-Money Laundering (AML) and Counter-Terrorist Financing (CFT).</p><p>Paolo is Professor of Privacy, Cybersecurity, and IT Contract Law at the EuropeanCentre on Privacy and Cybersecurity (ECPC) within the Maastricht University Faculty of Law. and Cloud Computing SectorDirector and Responsible for Foreign Affairs at the Italian Institute for Privacy in Rome, Italy. He is involved in European Commission studies on new technologies and participated in the revision of the EU Commission proposal for a General Data Protection Regulation.</p><p>He co-chairs the Privacy Level Agreement (PLA) Working Group of Cloud Security Alliance and has acted as the legal counsel for the European Network and Information Security Agency (ENISA) projects on ‘Cloud Computing Risk Assessment’, ‘Security and Resilience in Governmental Clouds’, and ‘Procure Secure: A guide to monitoring of security service levels in cloud contracts’.</p><p>Paolo is the author of the book Trustmarks in E-Commerce: The Value of WebSeals and the Liability of their Providers (T.M.C Asser Press), and of numerous journal articles published in leading European Law reviews.</p><p>Graduated in Law at the University of Bologna (Italy) in 2001, Paolo Balboni completed his Ph.D. in Comparative Technology Law at TilburgUniversity (The Netherlands) in 2008.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Michael Roza Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc3NCwicHVyIjoiYmxvYl9pZCJ9fQ==--2ee3c93fe3c1fbe44c00209688a02592cb8f251c/roza.jpg" /></div><div class="o-media"><h3>Michael Roza</h3><h6>Risk, Audit, Control and Compliance Professional at EVC</h6><div class="b-limited-content"><p>Since 2012, Michael Roza has been a pivotal member of the Cloud Security Alliance (CSA) family. He has contributed to over 125 projects, as a Lead Author or Author/Contributor and many more as a Reviewer/Editor.</p><p>Michael's extensive contributions encompass critical areas including Artificial Intelligence, Zero Trust/Software Defined Perimeter, Internet of Things, Top Threats, Cloud Control Matrix, DevSecOps, and Key Management. His leadership at CSA has included co-chairing working groups such as Top Threats, Enterprise Architecture, and Security-as-a-Service, as well as co-leading ZT Pillar 5, Network/Environment, where he has played a significant role in advancing cloud security practices.</p><p>In addition to his research, Michael has been instrumental in developing CSA's certifications, including the CCAK, CCSK, and CCZT. He has authored and edited each certification's Body of Knowledge, along with the corresponding certification exams. Beyond this, Michael has contributed to the development of over 20 micro-courses, many of which are based on CSA publications to which he also contributed.</p><p>Michael's dedicated efforts have earned him the prestigious Juanita Koilpillai Service Award in 2018, 2020, 2021, and 2022, as well as the CSA's highest award the CSA Research Fellowship Award in 2021.</p><p>With over 20 years of experience in risk, audit, control, and compliance, Michael has worked with major organizations such as Bridgestone EMEA, Komatsu International, Mitsui Novus International, Johnson & Johnson Inc., and Baxter Inc. He has also collaborated with startups across sectors including network management, contact center software, disk manufacturing, and radiological cancer treatment. In leadership roles, he has transformed risk management and internal audit functions, managed complex SAP transformation and configuration projects, and strengthened compliance through robust IT general controls and segregation of duties frameworks.</p><p>Michael has also served as a secretary or observer on key committees focused on internal audit, risk management, corporate governance, information security, and corporate social responsibility, further establishing himself as an advocate for governance and compliance.</p><p>His professional certifications include Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), and Certified Internal Auditor (CIA). He has also attained the CSA’s Cloud Security Knowledge v5 (CCSKv5) and CSA Cloud Zero Trust v5 (CCZTv1) certifications. Michael holds an AEMBA from Claremont College’s Peter Drucker Center and an MBA from DePaul University.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Kai Chen Headshot Missing" class="headshot" width="200px" src="/assets/fallback/csa-headshot-7b449f5deff0b8be963d29536d108a63e2ef86ec765da989bb085a7d8c14217c.png" /></div><div class="o-media"><h3>Kai Chen</h3><div class="b-limited-content"></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Mariano J. Benito Headshot Missing" class="headshot" width="200px" src="/assets/fallback/csa-headshot-7b449f5deff0b8be963d29536d108a63e2ef86ec765da989bb085a7d8c14217c.png" /></div><div class="o-media"><h3>Mariano J. Benito</h3><div class="b-limited-content"></div></div></div></div></div></div></div><div class="o-area o-area--separated o-area--alternating"><div class="o-container"><h2 class="c-heading c-heading--section" id="2017">2017 Service Award Recipients</h2><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Xiaoyu Ge Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTI0MSwicHVyIjoiYmxvYl9pZCJ9fQ==--5300e9676233af8e48643be1d170f79476e2e2db/xiaoyu-ge.jpg" /></div><div class="o-media"><h3>Xiaoyu Ge</h3><h6>Senior Security Standards Manager of Huawei IT</h6><div class="b-limited-content"><p>Xiaoyu Ge is the Senior Security Standards Manager of Huawei IT Product Line which include cloud computing, big data, storage, and server products and services. He is also active as security expert in SDOs, He is the ISO/IEC JTC1 SC27 WG expert of China Nation Body, he is the rapporteur of several SC27 project such as “Requirements for establishing roots of trust for virtualized environment”. He participated in CSA several years ago, he is the main contributor of CSA “Best Practices for Mitigating Risks in Virtualized Environments”. He is also the CSA ISC member. Currently, his research interests focus on cloud security.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Jon-Michael Brook Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MjQyMTQsInB1ciI6ImJsb2JfaWQifX0=--a7375654b40b8faf0196d2525ed503f465a8aabb/Jon-Michael_Brook_1676316333698001Ti4g_1676328890534001qP6z.jpeg" /></div><div class="o-media"><h3>Jon-Michael Brook</h3><div class="b-limited-content"><p>Jon-Michael C. Brook is a certified, 25-year practitioner of cybersecurity, cloud, and privacy. He is the principal contributor to certification sites for privacy and cloud security, and has published books on privacy. Jon-Michael received numerous awards and recognition during his time with Raytheon, Northrop Grumman, Symantec, and Starbucks. He holds patents and trade secrets in intrusion detection, GUI design, and semantic data redaction. He is recognized as a Research Fellow with the Cloud Security Alliance and currently co-chairs the CSA’s Top Threats to Cloud Security and Enterprise Architecture Working Groups. Jon-Michael is a certified trainer for the CSA's Cloud Security (CCSK+) and Cloud Governance (CGC), teaching the CCSK+ training at RSAC, Black Hat, and ISC2 conferences.</p><p><strong>Contributions</strong>: Top Threats Working Group co-chair, Cloud Broker Working Group co-chair and contributor to several additional working groups. Certified Certificate of Cloud Security Knowledge+ (CCSK+) trainer and Cloud Controls Matrix (CCM) reviewer.<br></p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Anil Karmel Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6NTA1NiwicHVyIjoiYmxvYl9pZCJ9fQ==--778ab33ef676aa26c79e2c4df889281b8db0112c/anil%20karmel2.jpg" /></div><div class="o-media"><h3>Anil Karmel</h3><h6>CEO, C2 Labs</h6><div class="b-limited-content"><p>Anil Karmel is the Co-Founder and CEO of RegScale, which helps organizations start and stay compliant via the world's first real-time GRC platform. Formerly, Anil served as the National Nuclear Security Administration's (NNSA) Deputy Chief Technology Officer. Karmel began his government career as a Technical Staff Member of Los Alamos National Laboratory (LANL) and was responsible for inventing their cloud and collaboration technologies Karmel and his team have garnered industry and government accolades, including the SANS National Cyber Security Innovators Award for Cloud Security, InformationWeek 500 Top Government IT Innovators, ACT/IAC Excellence.gov Award and the DOE Secretary's Achievement Award. Anil currently serves as the president of the Cloud Security Alliance’s DC Metro Area Chapter and as a member of the CSA's CxO Trust Advisory Council. </p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Sabri Khemissa Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTM0MiwicHVyIjoiYmxvYl9pZCJ9fQ==--11f1a5b8b8049cc15502b9572e7c72826e8cebb9/sabri-khemissa.jpg" /></div><div class="o-media"><h3>Sabri Khemissa</h3><div class="b-limited-content"><p>Sabri is the ICS group cybersecurity officer a French multinational corporation that produce a variety of construction and high-performance materials. He is in charge of developing and maintaining the cybersecurity strategy, building and coordinate a cross-country and cross-business cybersecurity governance, supporting business initiatives, including strategic Smart Manufacturing and IIoT projects with a large shift to cloud services, defining new policies and rules, and selecting adequate solutions.</p><p>With more than 20 years of experience in cybersecurity services, Sabri has developed extensive experience in developing cybersecurity frameworks and designing cyberecurity solutions for complex and hybrid OT/IT/cloud architectures. He also provide top management cybersecurity advisories in early stages of strategic enterprise projects, specially into digital transformation contexts and new technologies adoption.</p><p>Sabri is an active member of the IoT working group where he has participated too many publications. He also contribute to IDaaS and the SIEM sub-groups of the Security-as-a-Service (SECaaS) working group. He co-chaired, for two years, the CSA DLT/Blockchain working group.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Ashish Mehta Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6ODUyMCwicHVyIjoiYmxvYl9pZCJ9fQ==--edc96e843eb5dd1d9ca8f8fd2705f9163dd6b0ad/ASHISH.MEHTA_PROFILE_PHOTO.jpg" /></div><div class="o-media"><h3>Ashish Mehta</h3><h6>Cybersecurity - Sr. Risk Manager & Security Architect</h6><div class="b-limited-content"><p>Ashish Mehta has extensive experience in cybersecurity, blockchain, web development, IT management, financial markets, and the energy industry.</p><p>He currently serves as Co-Chair of the Blockchain Working Group and is a part of the Internet of Things (IoT) and Quantum-Safe Security Leadership Teams at the Cloud Security Alliance. In that capacity, he is responsible for pushing their multiple research efforts as well as coordinating with multiple industry participants on the cross-pollination of research.</p><p>He also serves as an Advisor to the Government of Kerala's Blockchain Initiative. He serves as an advisor to multiple blockchain startups and is a part of technology analyst panels like Dimensional Research, IDG, and Aberdeen. He has served as an IT management and cybersecurity professional for multiple SMEs across UAE, India, and USA for over a decade prior to starting his own cybersecurity consultancy.</p><p>He was awarded the Ron Knode Award for Cybersecurity Best Practices at<br>SecTor, Toronto, Canada in 2017. He is a co-author of books on BPX (SAP) and OCEG RedBook(GRC). He is also an active participant in the research efforts of NIST, ACT-IAC, OWASP, and IEEE. He holds multiple certifications in the fields of IT, cybersecurity, blockchain, and IoT. Has a special research interest in quantum computing and IoT defensive techniques. He has been interviewed by Leading Technology Journals like IoT-Inc and has spoken at multiple global events like Metamorphosis 2020, LF Energy 2020, and Planet Blockchain.</p><p>Ashish completed his B.Tech (Hons) in Electrical Engineering and M.Sc in Cryptography with a Minor in Technology Strategy from Columbia Business School, NY.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Ronald Tse Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTE5NywicHVyIjoiYmxvYl9pZCJ9fQ==--f57f24e044686fa3c9945b14e1633bc3e7ddd7ad/ronald-tse.jpg" /></div><div class="o-media"><h3>Ronald Tse</h3><h6>CEO, Ribose</h6><div class="b-limited-content"><p>Ronald has served CSA in numerous capacities, including as a member of CSA's APAC Research Advisory and International Standardization Council. Additionally, he co-chairs the Open Certification Framework (OCF), SaaS Governance, and DevSecOps working groups. He is the founder and CEO of Ribose, where under his leadership the company has been consistently awarded the industry's highest cloud security ratings, including being the only organization to be triple assured by CSA: CSA STAR Attestation, CSA STAR Certification, and CSA C-STAR Assessment. He is Vice President and Director of External Relationships for CalConnect and a founding co-chair of several of its committees. He sits on the ECCMA Board of Directors, is a Certification Advisory Council Member for BSI Pacific, and a UN/CEFACT expert for the UN Economic Commission for Europe. Additionally, he is a Convener of ISO/TC 154/WG 4 and ISO/TC 154/WG 5, and expert representative to numerous ISO committees for CSA, CalConnect, Canada, United States, and Hong Kong, China. He received CSA's Ron Knode Award in 2017, and is an IAPP Fellow of Information Privacy, a member of Sigma Xi, a CISSP-ISSAP, ISSMP, CSSLP, CAP, SSCP, CISA, CISM, CRISC, CGEIT, CIPP/US, CIPM, CIPT, PSM I-II-III, PSPO I-II, PSD and CCIE Emeritus #9650. He received his bachelor's degree magna cum laude in Computer Science and Biology and a Master of Science in Computer Science from Brown University</p></div></div></div></div></div></div></div><div class="o-area o-area--separated o-area--alternating"><div class="o-container"><h2 class="c-heading c-heading--section" id="2016">2016 Service Award Recipients</h2><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Anthony Lim Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc4MCwicHVyIjoiYmxvYl9pZCJ9fQ==--03159baa4880fd817d2962c43806418562a022bc/anthony-lim-e923947ec85bc148ee2ab9dc2b2af23f.jpg" /></div><div class="o-media"><h3>Anthony Lim</h3><div class="b-limited-content"><p>Anthony is a 20-year Asia Pacific cyber-security pioneer and veteran professional, and an early advocate of cloud computing security and governance, since before 2010, when at IBM he was inaugural AP business leader for application security. Prior, he was Check Point’s founding AP managing director and CA’s first regional security brand director. He is currently a consultant, instructor and auditor in this area.</p><p>Anthony was on the international CSA-ISC2 JTA committee that built the CCSP and is AP’s first instructor for it. He had been an active board member of CSA Singapore chapter and has been active for both CSA Singapore and CSA Asia Pacific in making seminar presentations, conducting workshops and training, hosting executive roundtables and expert forums, sitting on government and industry committees, providing content for and speaking with the media, on various aspects of cloud security and promoting CSA’s thought-leadership activities, resources and services in the region, which is is still doing to this day.</p><p>Anthony is a long-time well-known subject-matter-expert and speaker at many industry, business, government and academic conferences, workshops, committees and media (print, broadcast, internet) on matters of cyber-security and governance in the Asia Pacific region, and is often interviewed on TV news, including recently on BBC. He is a two-time recipient of ISC2’s senior information security professional awards and was vice-chair of its global application security advisory council.</p><p>His current advocacy and research pursuits are in smart nations / safe cities and was a speaker at a Stanford University seminar and a NATO workshop. He is a guest and adjunct instructor at some universities, and is a life alumni member of the University of Illinois, Urbana-Champaign.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Juanita Koilpillai Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTE2NSwicHVyIjoiYmxvYl9pZCJ9fQ==--9a3598794d927fa75f15b25cd89ef1f05e4a76cc/juanita-koilpillai.jpg" /></div><div class="o-media"><h3>Juanita Koilpillai</h3><h6>Pioneer of Software Defined Perimeter</h6><div class="b-limited-content"><p>Juanita Koilpillai was Founder and CEO of Waverley Labs, a pioneer in software defined perimeters (SDP) and digital risk reduction solutions. She had 30 years’ experience researching and developing systems in computer security, network management and real-time distributed software. She led the open source software-defined perimeter (SDP) effort for ‘black’ apps in the cloud with the Cloud Security Alliance and was an active contributor to NIST leading the creation of a security risk index system for moving apps to the cloud (NIST 500-299). She was a key member of FEMA’s Enterprise Security Management Team and served as Principle Investigator for several DoD initiatives. She co-founded CyberWolf - an advanced automated attack warning system deployed by government and later acquired by Symantec. </p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Eric Wang Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc3OSwicHVyIjoiYmxvYl9pZCJ9fQ==--692ee9ea1b99dffd32935843d27f73728e3aa90e/eric-wang-6b3751ffbe961445130bbdf24b2aa6f1.jpg" /></div><div class="o-media"><h3>Eric Wang</h3><div class="b-limited-content"><p>Mr. Wang has more than 30 years experience in IT domain, he the expert on IT Security, and also professional in ERP, and Linux. He had led may important IT projects, such as emoffice、MEES、ecOS, iBon v1, Jcloud, and Bootable-USB-EasyLock. He is also UWCE/UWSE Implementor、ISO/IEC 17025 Certification、CEH, AutoCad certified, as well as the e-commerce representer in APEC 2009.</p><p>Right now, Eric Wang leads CSA “Mobile App Security Testing (MAST) Co-Chair to publish the world first App Security Testing White paper, and leading the Open Cloud Framework for MAST, CSA.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Andreas Fuchsberger Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTAzNzksInB1ciI6ImJsb2JfaWQifX0=--c540d12cc1ad1bf442d1a14764c1434beb291aae/andreas_fushburger.jpg" /></div><div class="o-media"><h3>Andreas Fuchsberger</h3><div class="b-limited-content"><p>Andreas Fuchsberger is a Standards Officer in Microsoft’s Corporate Standards Group. In this role he participates in the international standards community, predominantly attending ISO/IEC JTC 1/SC 27 (IT Security Techniques) as a UK NB delegateITU-T SG 17 (Security) as an ISO invited expert. Currently for SC 27 he is the convener of the Special Working Group on Traversal Items and the editor of 2 international standards on network security and security information and event management (SIEM).</p><p>Andreas co-chairs the Cloud Security Alliance’s International Standards Council where he is the liaison officer to ITU-T SGs 13 and 17. He also co-chairs CSA’s Open Certification Framework working group. He has been an appointed member of (ISC)2‘sSecurity Advisory Board (ASAB)</p><p>Previously Andreas was a full-time academic at the internationally recognized Information Security Group at Royal Holloway, University of London, where he previously lectured in the areas of network, computer and software security. He has over 20of experience in teaching and running training programmes in IT security architecture, design and programming. He has published articles on programming and network security, intrusion detection/prevention and vulnerability analysis.</p><p>Andreas holds the joint CSA/(ISC)2 CCSP as well as CISSP, ISSAP and CSSLP credentials of (ISC)2. He is a registered Chartered Engineer (CEng) of the Engineering Council UK as well as a EUR ING of Fédération Européenne d’Associations Nationales’Ingénieurs (FEANI).</p><p><strong>Contributions</strong>: Co-chair of the CSA’s International Standardization Council and Open Certification Working Group Leadership. Speaker at numerous events, including the 2015 U.S. Congress and the CSA APAC CISO Forum in 2013.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Bruno Huttner Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTI2NiwicHVyIjoiYmxvYl9pZCJ9fQ==--971edbe40b20614ab89ea94160e63a4d60c15c07/bruno-huttner.jpg" /></div><div class="o-media"><h3>Bruno Huttner</h3><div class="b-limited-content"><p>Bruno has co-chaired CSA’s Quantum-Safe Security working group, which was formed to address key generation and transmission methods and help the industry understand quantum‐safe methods for protecting their networks and their data, for approximately six years. As such, he has participated in writing most of the group’s research papers and has given several presentations about the group’s work. Bruno joined ID Quantique in 2014, where he’s responsible for the business development and product management in the quantum security division. Over the course of his career, Bruno has participated in and given lectures at many international conferences. He has also been active in standardization organizations, first in ITU-T on the polarization effects in optical fibers, then in SAE, ARINC and ASD/STAN for applications of optical fibers in aviation. Bruno is an engineer (Ecole Centrale Paris) and a physicist (PhD from the Technion, Israel Institute of Technology).</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Brian Russell Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTI0NywicHVyIjoiYmxvYl9pZCJ9fQ==--56cc615b03f813bf73d87e2e776b19d5ecb7a000/brian-russel.jpg" /></div><div class="o-media"><h3>Brian Russell</h3><div class="b-limited-content"><p>Brian Russell is co-author of the book “Practical Internet of Things Security” and is a Chief Engineer focused on Cyber Security Solutions for Leidos (www.leidos.com). He oversees the design and development of security solutions and the implementation of privacy and trust controls for customers. Brian leads efforts that include security engineering for Unmanned Aerial Systems (UAS) and Connected Cars, and the development of high assurance cryptographic key management systems. Brian is the Chair of the Cloud Security Alliance (CSA) Internet of Things (IoT) Working Group and serves on the Editorial Panel of the Center for Internet Security (CIS) 20 Critical Security Controls for Effective Cyber Defense. Brian also supports the Federal Communications Commission (FCC) Cyber Security Working Group and is a contributor to the Securing Smart Cities Initiative.<br></p></div></div></div></div></div></div></div><div class="o-area o-area--separated o-area--alternating"><div class="o-container"><h2 class="c-heading c-heading--section" id="2015">2015 Service Award Recipients</h2><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Said Tabet Headshot Missing" class="headshot" width="200px" src="/assets/fallback/csa-headshot-7b449f5deff0b8be963d29536d108a63e2ef86ec765da989bb085a7d8c14217c.png" /></div><div class="o-media"><h3>Said Tabet</h3><div class="b-limited-content"></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Kai Roer Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc3MywicHVyIjoiYmxvYl9pZCJ9fQ==--8b49ad176a16438393672f409debd528eb7b8543/kai.jpg" /></div><div class="o-media"><h3>Kai Roer</h3><div class="b-limited-content"><p>Kai Roer provides Fortune 1000 companies worldwide with expertise on how to build and maintain security culture based on his free and open Security Culture Framework. Roer is a bestselling author, speaker and security culture facilitator who believes in the power of volunteerism.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Mariano Benito Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc4MiwicHVyIjoiYmxvYl9pZCJ9fQ==--09cf439e4a9171259fdb8506dfa959a49f75e081/mariano-benito-c947ab19f0c9962f0286a5e96d63101d.jpg" /></div><div class="o-media"><h3>Mariano Benito</h3><h6>CISO at GMV</h6><div class="b-limited-content"><p>Mariano J. Benito is CISO at GMV, a leading Spanish company in the cybersecurity field, and CSA Spanish Chapter task force (CSA-ES CTO). Along his twenty-year long career, he has contributed to the development and implementation of international standards, including ISO 27001 & 22031 at GMV. Mariano J. Benito has also developed a specific focus also on Cloud Computing, Compliance & Governance, being the author of the first security analysis in Spain regarding cloud security (2009) and currently contributing to the deployment in Spain of CSA Guide, CCM, PLA and other local CSA initiatives.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Dr. Said Tabet Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc4MSwicHVyIjoiYmxvYl9pZCJ9fQ==--3b04867ab4aa31fd0fb286c0baf273a31af3c225/dr-said-tabet-53f2c9e480d0f357246b05a6336f6403.jpg" /></div><div class="o-media"><h3>Dr. Said Tabet</h3><h6>Senior Technologist and Industry Standards Strategist in the Corporate Office of the CTO at EMC</h6><div class="b-limited-content"><p>Dr. Said Tabet is a member of the Object Management Group Board of Directors and the principal EMC representative to the Industrial Internet Consortium. Said is the Chair of the INCITS CS1 Secure Cloud Computing Ad-Hoc Group, and a member of the US delegation to ISO SC27. He is also a member of the Cloud Security Alliance International Standardization Council, co-Chair of the SME Council and the Cloud Security SLA working group. Said spent over two decades driving and contributing to various international standardization activities including ISO, RuleML, OMG standards, W3C Semantic Web and Rules, Risk and Compliance, GRC-XML, Regulatory Reporting and Supervision, Security and Data protection and Privacy. Said continues to work on challenges around Cloud Computing adoption, IoT, Cloud SLA and security SLA automation, Big Data Analytics and security, cyber security and best practices, Industrial Internet of Things, and Semantic Data Collaboration. He is a regular speaker and panelist at industry conferences and international standards meetings, authors and editor of book series and articles.</p><p><strong>Contributions</strong>: Member of the Cloud Security Alliance International Standardization Council, co-Chair of the SME Council Cloud Trust Working Group co-chair, and the Cloud Security SLA working group. Regular speaker and panelist at industry conferences and international standards meetings; author and editor of book series and articles. Co-author of ‘Practices for Secure Development of Cloud Applications’ and ‘CSA Security Guidance Version 3: Domain 4. Recipient of the Ron Knode Award.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="David Siah Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc4MywicHVyIjoiYmxvYl9pZCJ9fQ==--d1f7031432fdb5c11d5d8bfcaab2203cde52fad1/david-siah-233c408aa9baa99a684e089c0069330e.jpg" /></div><div class="o-media"><h3>David Siah</h3><h6>Vice-Chairman, CSA Asia Pacific Executive Council</h6><div class="b-limited-content"><p>David Siah is actively involved in cyber-security activities in Singapore. He is a member of iDA’s Cyber Security Alliance as well as iDA’s working group on Cloud Outage Incidence Response. He is also a committee member on the Singapore Information Technology Federation’s Security and Governance Chapter and is the Country Manager of Trend Micro. In his capacity, he runs Trend Micro’s business operations in Singapore and is in charge of Trend Labs Singapore — responsible for malware analysis and response.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Brian Russell Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTI0NywicHVyIjoiYmxvYl9pZCJ9fQ==--56cc615b03f813bf73d87e2e776b19d5ecb7a000/brian-russel.jpg" /></div><div class="o-media"><h3>Brian Russell</h3><div class="b-limited-content"><p>Brian Russell is co-author of the book “Practical Internet of Things Security” and is a Chief Engineer focused on Cyber Security Solutions for Leidos (www.leidos.com). He oversees the design and development of security solutions and the implementation of privacy and trust controls for customers. Brian leads efforts that include security engineering for Unmanned Aerial Systems (UAS) and Connected Cars, and the development of high assurance cryptographic key management systems. Brian is the Chair of the Cloud Security Alliance (CSA) Internet of Things (IoT) Working Group and serves on the Editorial Panel of the Center for Internet Security (CIS) 20 Critical Security Controls for Effective Cyber Defense. Brian also supports the Federal Communications Commission (FCC) Cyber Security Working Group and is a contributor to the Securing Smart Cities Initiative.<br></p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Benildus Nadar Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc4NCwicHVyIjoiYmxvYl9pZCJ9fQ==--ec4d545771f6b13c55de2e18d2c7e3979f526317/benildus-nadar-341dd94506fa1175dee7e017b6dd1f4f.jpg" /></div><div class="o-media"><h3>Benildus Nadar</h3><h6>Chair for India Regional Coordinating Body</h6><div class="b-limited-content"><p>Benildus provides senior advisory services in area of Information Technology with a concentration on Information Security and Risk. Currently with Ericsson, Benildus worked in IBM, Fidelity Investment, Comodo etc in a career spanning 14 Years. Benildus is the founder and chairperson of the CSA Bangalore Chapter, one of the biggest chapters for CSA worldwide.</p></div></div></div></div></div></div></div><div class="o-area o-area--separated o-area--alternating"><div class="o-container"><h2 class="c-heading c-heading--section" id="2014">2014 Service Award Recipients</h2><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Yi-Lang Tsai Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc4NSwicHVyIjoiYmxvYl9pZCJ9fQ==--bd5685187c1dd61f1c5d021a98e15ad0828102b2/yi-lang-tsai-903da9dfe4ee535b62b8ba076113529c.jpg" /></div><div class="o-media"><h3>Yi-Lang Tsai</h3><h6>Founder and Director of the CSA Taiwan Chapter</h6><div class="b-limited-content"><p>Yi-Lang Tsai is a famous IT commentator and author in Taiwan having published 34 books and many columns in professional IT publications. His works include the research projects for the detection, The Honeynet Project Taiwan Chapter Leader, the analysis and the honeypot related information security technologies and also in the cloud security technologies for industry, government and academy. He is the Director of major security projects and leader of an Information Security Incident Response Team to work for Taiwan Academic Network (TANet) to handing security incident. He is an expert in UNIX/Linux, Windows OS, communication network technology, network security, ISMS, and digital forensics.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Junaid Islam Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTgwMzIsInB1ciI6ImJsb2JfaWQifX0=--c7e73e924f4832acf148b55287a45e49f91dbd90/man.png" /></div><div class="o-media"><h3>Junaid Islam</h3><h6>Secure Communications Expert</h6><div class="b-limited-content"><p>Junaid Islam is the CTO and founder of Vidder which provides distributed access control solutions to Fortune 500 companies. Prior to founding Vidder, Junaid founded Bivio Networks which developed the first Gigabit speed software based securityin the industry. Earlier in his career Junaid helped create networking standards such as Frame Relay, ATM and MPLS while at StrataCom and Cisco.</p><p>In addition to his work in the technology industry Junaid has served at the local and national levels. Junaid served as the Human Relations Commissioner of Santa Clara Country (Silicon Valley) from 2002 to 2009. Currently Junaid is the Co-Chair ofSoftware Defined Perimeter (SDP) research group which supports a number of US national cyber security initiatives.</p><p><strong>Contributions</strong>: Co-chair of the SDP Working group; co-author and chief architect behind the SDP specification. Presenter at several events including U.S. Congress 2013, CSA Congress in 2014 and 2015 and CSA Summit Hack-a-thon host. Recipient of the Ron Knode Award.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Eric Hibbard Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc4OSwicHVyIjoiYmxvYl9pZCJ9fQ==--da8e14fa29713b7612a9728ac0a21dbecb4bbd14/eric-hibbard-8bcd946d1f02d1fab5160dda65a34999.jpg" /></div><div class="o-media"><h3>Eric Hibbard</h3><h6>Hitachi Data Systems’ CTO Security & Privacy</h6><div class="b-limited-content"><p>Eric Hibbard is Hitachi Data Systems’ CTO for Security & Privacy where he leads the Hitachi product-oriented security strategy activities with an emphasis on data and storage security. He is a senior security professional with expertise in information assurance, privacy, storage, cloud computing, eDiscovery and enterprise ICT. He leverages this expertise and extensive experience in the public and private sectors in leadership roles within the ABA, CSA, INCITS, IEEE and SNIA. Hibbard currently serves as the ISO editor of ISO/IEC 27040 (Storage security), ISO/IEC 27050 (eDiscovery) and ISO/IEC 17788 (Cloud computing). He speaks internationally and is published. Hibbard holds a BSCS along with the CISSP-ISSAP, ISSEP, ISSMP and CISA certifications. – See more at: <a href="http://www.rsaconference.com/speakers/eric-hibbard#sthash.dEjfY17n.dpuf">http://www.rsaconference.com/speakers/eric-hibbard#sthash.dEjfY17n.dpuf</a></p><p><strong>Contributions</strong>: Created the original ‘Top Threats’ to the cloud; co-chair and founder of the SDP Workgroup, where he invented SDP and managed all major activities. Authored numerous blog posts; speaker at numerous events, including CloudBytes presentations. Recipient of the Ron Knode Award.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Ben Katsumi Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc4OCwicHVyIjoiYmxvYl9pZCJ9fQ==--591e232a887766f67aa1cb260785ef5c778a33d9/ben-katsumi-716aeb68125ffbb947b6c898c70dc3f3.jpg" /></div><div class="o-media"><h3>Ben Katsumi</h3><h6>Executive Director and Secretary General of Cloud Security Alliance (CSA) Japan Chapter, Inc.</h6><div class="b-limited-content"><p>Ben T. Katsumi is President and CEO, Information Economy Research Institute, Inc. and former Chief Researcher, IT Security Center, IPA(Information-technology Promotion Agency Japan).</p><p>Mr. Katsumi has 20 years of experience in cybersecurity specializing in market analysis, social and international studies, and security management and governance. His career includes 8 years at IPA as a researcher (2005 thru 2013), consultant at several Japanese firms including Ricoh’s subsidiary (2004 thru 2008), director at Symantec Japan (2001 thru 2004).</p><p>In 2010 Mr. Katsumi co-founded CSA Japan Chapter, which was incorporated in 2013 where he serves as a board member as well. He is members of Japan Network Security Association (JNSA), JASA Cloud Information Security Promotion Alliance (JCISPA), Japan Society of Security Management (JSSM), and Institute of Digital Forensics (IDF). CCSK, CISA, Information Security Associate Auditor, Certified Information Security Administrator.</p><p>He is a frequent writer and a speaker at domestic and international conferences including NIST Cloud Forum & Workshop, IEEE-EMBC, CloudAsia, CloudscapeV, Securecloud, and CSA Congress.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Alberto Manfredi Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mjc3MTMsInB1ciI6ImJsb2JfaWQifX0=--ef8ef6d3a0c6af7c651c69404174122d64b62e7b/Alberto_mar2024%20(blue).png" /></div><div class="o-media"><h3>Alberto Manfredi</h3><h6>President and Country Leader, CSA Italy</h6><div class="b-limited-content"><p>MSc in Computer Science and Master of Science in Computer Science from the University of Milan with the highest marks and honors, he has been working in the Information Technology market for over 30 years, of which more than 20 in the field of Cyber and Information Security. Since 2002 he has been working at Leonardo SpA, where in recent years he has held the role of Divisional CISO and Senior Advisor in the Corporate Security function and since 2023 he has been in the Cyber & Security Solutions Division in the role of Senior Advisor Security Certifications. Specialized in Computer Forensics and Digital Investigations at the University of Milan and holds an Executive MBA from the University of Pavia. He holds the professional certifications CISA, CRISC, CISSP, GCFA, CCSK, CCZT, Lead Auditor 27001 & CSA STAR. President and co-founder of CSA Italy since 2011, the national chapter of CSA, from which he received the Ron Knode Service Award in 2014, and CSA Authorized Instructor.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Damir Savanovic Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6NDE0NCwicHVyIjoiYmxvYl9pZCJ9fQ==--f3fc4721a1a411d96bf37e10b1af2fae9cef98f9/damir.png" /></div><div class="o-media"><h3>Damir Savanovic</h3><div class="b-limited-content"><p>Damir Savanovic (M) is an Associate Director - Cloud Controls Lead at Willis Towers Watson, leading a team of subject matter experts to address compliance and control requirements for multiple compliance frameworks within information and cybersecurity for a global financial institution. </p><p>As a security evangelist and subject matter expert in the areas of security governance, risk and compliance, data protection with over 15 years of experience in cyber security, he has vast experience and knowledge of cyber security and privacy standards, laws and regulations. Damir worked as a Senior Innovation Analyst and Program Manager at Cloud Security Alliance, CISO and IT Quality Manager in SKB, Société Générale Group, and as IS Auditor at EY. Damir graduated from University of Ljubljana (Slovenia) in Information Technology and holds CCSK, CISM, CISA and ISO/IEC 27001 Lead Auditor certifications. <br></p><p><strong></strong><br></p></div></div></div></div></div></div></div><div class="o-area o-area--separated o-area--alternating"><div class="o-container"><h2 class="c-heading c-heading--section" id="2013">2013 Service Award Recipients</h2><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Dr. Siani Pearson Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc5MCwicHVyIjoiYmxvYl9pZCJ9fQ==--f8b17902c045f5cb6ca05774fd530fba75d6454b/dr-siani-pearson-22c9f93a91e42a400348a0d84cce5e27.jpg" /></div><div class="o-media"><h3>Dr. Siani Pearson</h3><h6>Principal Research Scientist at HP Labs, Bristo</h6><div class="b-limited-content"><p>Dr. Siani Pearson’s current research focuses on accountability, privacy and the cloud and she holds over 50 patents and is author or co-author of well over 100 papers and technical reports in these fields.</p><p>Siani received an MA from Oxford University in logic, a PhD in artificial intelligence from the University of Edinburgh and was a Research Fellow at Cambridge University before joining HP in 1994. She is a Fellow of the British Computer Society, senior member of IEEE and a Certified Information Privacy Professional/Information Technology. Siani is currently the scientific coordinator of a major European research project on Accountability for the Cloud (A4Cloud) and is a member of: HP Privacy and Data Protection Board; UK Cloud Security Alliance Chapter board; HP cloud security WG; CSA PLA and OCF WGs; IEEE Transactions on Cloud Computing Editorial Board; UK IEC subcommittee on data principles; numerous programme committees, including being Program Chair of IEEE CloudCom 2014; the steering committees of a number of conferences and advisory boards of several universities and EU projects.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Antony Ma Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc5MSwicHVyIjoiYmxvYl9pZCJ9fQ==--c1f857be61fb082a2c8838434d5b7bf70036d423/antony-ma-b33e0e638bcd9244f176f429896dea5b.jpg" /></div><div class="o-media"><h3>Antony Ma</h3><h6>Member of Hong Kong OGCIO Expert Group on Cloud Computing</h6><div class="b-limited-content"><p>Antony Ma has over 14 years experience in the IT industry taking roles in different areas including software development, IT auditing and IT security. Antony has professional qualifications including CISSP, CISA, Oracle DBA and BS7799 ISMS assessor. He received a Bachelor degreed in Engineering, then completed a LLM degree in Intellectual Property & Information Technology Law from the Faculty of Law at the University of Hong Kong.</p><p>Antony has extensive experiences in financial IT, especially in IT compliance and technology risk management.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Dominik Birk Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc5MiwicHVyIjoiYmxvYl9pZCJ9fQ==--cc032faaaafb96cf3ab235818e8bf71c5684bdde/dominik-birk-b5d79d8ba9071fc304b576b0fe4af393.jpg" /></div><div class="o-media"><h3>Dominik Birk</h3><h6>Vice President of the CSA Swiss Chapter</h6><div class="b-limited-content"><p>Dominik Birk is working as a Information Security Manager for the Zurich Insurance Group in Zurich, Switzerland. Besides that, Birk is leading the the CSA WG “Incident Management and Forensics”, helped establish the German and Swiss local CSA Chapters, and contributed to the CSA Cloud Security Guidance V3.0.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Sean Cordero Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTE1NywicHVyIjoiYmxvYl9pZCJ9fQ==--fe25131fcbb984ebaa8c082beab78a03008556da/sean-cordero.jpg" /></div><div class="o-media"><h3>Sean Cordero</h3><div class="b-limited-content"><p>Sean Cordero brings more than 15 years of information security and IT experience to his current role as director, information security at Optiv. Cordero provides executive level advisement for the company’s Fortune 50 clients. Cordero’s prior leadership roles included: President of Cloud Watchmen, CSO for EdFund, CSO for ECMC West, Director of Security and Compliance for Charlotte Russe.</p><p>Cordero is a thought-leader and serves as chair of the Cloud Security Alliance’s (CSA) Cloud Control Matrix working group where he drives the development of security standards for cloud computing. Cordero was awarded the 2013 Ron Knode Service Award by the Cloud Security Alliance for his contributions to cloud research.</p><p>Cordero is active in the conference speaking circuit where he has presented for CSO magazine, the CSA, the High Technology Crimes Association, Secure360, the University of California, Bsides, and ISACA. Cordero is CISSP, CRISC, CISM and CISA.</p><p><strong>Contributions: </strong>Evangelized use of CCM and the CSA Security, Trust and Assurance Registry (STAR) across the industry at conferences, webinars and podcasts. Co-led the development of the CCM and helped drive CCM versions 1.3, 1.4, and 3.0. Recipient of 2013 Ron Knode Award.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Evelyn de Souza Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTI2MiwicHVyIjoiYmxvYl9pZCJ9fQ==--de952955416f47bc8e3c5a30f709dd70faf1efb0/evelyn-de-souza.jpg" /></div><div class="o-media"><h3>Evelyn de Souza</h3><h6>Senior Security Strategist at Cisco</h6><div class="b-limited-content"><p>Evelyn is responsible for championing holistic security solutions that address emerging industry trends such as cloud, data center SDN and mobile. She is a strong proponent of building automated, repeatable processes that enable organizations to sustain compliance while optimizing security posture and reducing costs. To this end, Evelyn co-chairs the Cloud Security Alliance Cloud Controls Matrix (CCM) which harmonizes regulations and industry standards to a common framework and according to cloud model to enable reduce audit complexity. Evelyn has a weekly column on WIRED Insights and frequently posts at CloudTweaks, Internet Evolution and 21st Century. Evelyn is also a regular speaker at industry conferences and can be followed on Twitter @e_desouza.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Nantawan Wongkachonkitti Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc5MywicHVyIjoiYmxvYl9pZCJ9fQ==--ed9f1694c9f56b28730f346671b61e8e37ddf9d0/dr-nantawan-wongkachonkitti-a39825057520176a1d23a2d5fcc5fd01.jpg" /></div><div class="o-media"><h3>Nantawan Wongkachonkitti</h3><h6>Head of Marketing APAC</h6><div class="b-limited-content"><p>Nantawan serves as the Director of Innovation and Research and was formerly the Director for IT Intelligence Operations Division for Electronic Government Agency (Public Organization), Thailand. She has been working in the computer and telecommunication field for over 14 years. She manages Electronic Government Agency’s Operations Division for all IT Thailand Government. She is currently served as a secretary of CSA, Thailand Chapter which developed Cloud Control Matrix 1.3 on App Store for dual languages (Thai and English) called “Cloud Control Self Assessment”.</p></div></div></div></div></div></div></div><div class="o-area o-area--separated o-area--alternating"><div class="o-container"><h2 class="c-heading c-heading--section" id="2012">2012 Service Award Recipients</h2><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Henry St. Andre Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc5OCwicHVyIjoiYmxvYl9pZCJ9fQ==--40390d9a35eee0559bd358dbc4e09189b3ce27d5/henry-st-andre-7a7ffb55893264ef2f8ed9ea5c9d551a.jpg" /></div><div class="o-media"><h3>Henry St. Andre</h3><h6>Director of Trust Services for inContact</h6><div class="b-limited-content"><p>Henry St. Andre began his career in telecommunication 32 years ago, in 1984 during the break-up and divestiture of AT&T. He served as Director of Operations for over 25 years working for several different regional telecommunications providers and ultimately because the Director of Operations for inContact before being asked to be the Director of Trust Services at inContact, with the mission to create a security team and operations that could support the requirements of inContact, the leading provider of cloud based contact center solutions. inContact recognized very early the importance of security to its cloud customers and as such as Director of the Trust Team, he also took steps to involve inContact in the larger cloud security community by having inContact become a sponsor of the Cloud Security Alliance and engaging actively with the CSA in Subject Matter Expert team and other CSA sponsored activities.</p><p><strong>Contributions</strong>: Has served as SME Council co-chair for the past five years; member of several working groups, including the Mobile, SLA, Big Data, Telecom and Cloud Maturity Model; recipient of the 2012 Ron Knode Award.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Richard Zhao Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6Mzc5NywicHVyIjoiYmxvYl9pZCJ9fQ==--21d25f43b022ea89ad1d72e2b9f42571c20a5117/richard-zhao-28c34aba518bad9a5dcc382422d50da1.jpg" /></div><div class="o-media"><h3>Richard Zhao</h3><h6>Chief Strategy Officer of NSFOCUS</h6><div class="b-limited-content"><p>Dr. Liang ZHAO (Richard) manages the research team, strategic planning, and fosters innovations at NSFOCUS. He obtained his B.Sc, M.Sc. and Ph.D degrees from Peking University at 1991, 1994, 1997 respectively. Liang majored physics and fiber-optic communications and has over 15 years of professional experience in telecom and network security areas. He owns certifications of CISSP, ITIL, BS7799.</p><p>Prior to his current position, he was the Director of Architect and Security Operations at Lenovo, responsible for the infrastructure architect and information security operations from 2006 to Aug. 2009. Before Lenovo, he worked for Computer Associates as the Principal Consultant at China from 2003 to 2006. From 2000 to 2003, he worked for iS-One as Chief Strategy Officer, responsible for R&D, security consulting service and etc. From 1997 to 2000, he worked for China Telecom, as the chief of network security affairs.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Ryan Ko Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTA2MjMsInB1ciI6ImJsb2JfaWQifX0=--d896bb0c95c896bdbc0b34f31d58d8ac3902d639/ryan-ko.jpg" /></div><div class="o-media"><h3>Ryan Ko</h3><h6>Chair & Director at UQ Cyber Security, University of Queensland, Australia</h6><div class="b-limited-content"></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Dr. Ryan Ko Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MzgwMSwicHVyIjoiYmxvYl9pZCJ9fQ==--380572452ccd603cb25c985be5f34dc2d0353187/dr-ryan-ko-c894043bb64ac30cd0f7ec0e7a306fbf.jpg" /></div><div class="o-media"><h3>Dr. Ryan Ko</h3><h6>Asia Pacific Research Advisor, Chair & Director at UQ Cyber Security, University of Queensland, Australia</h6><div class="b-limited-content"><p>Dr Ryan Kok-Leong Ko is Head of Cyber Security Lab and Senior Lecturer at the University of Waikato, New Zealand, Affiliate Faculty Member at Idaho State University, USA, and Asia Pacific Research Advisor for the Cloud Security Alliance.</p><p>In 2013, he established New Zealand’s first Master of Cyber Security, and NZ’s first university-led cyber security graduate research programme with the Cyber Security Lab at the University of Waikato. Waikato’s Cyber Security Lab also hosts the NZ Cyber Security Challenge since 2014. Dr Ko is recipient of the University of Waikato’s Early Career Academic Excellence, Nola Campbell Memorial ELearning Excellence, and the 2014, 2015 Faculty Teaching Excellence Awards.</p><p>Recipient of the inaugural Cloud Security Alliance (CSA) Ron Knode Service Award in 2012, Dr Ryan Ko has served as a CSA APAC volunteer since CSA’s beginnings, including pioneering research via the formation of the CSA Data Governance Working group, CSA Cloud Vulnerabilities Working Group, and as curriculum and examination co-creator of the (ISC)2-CSA Certified Cloud Security Professional (CCSP).</p><p>Dr Ko is principal investigator of the MBIE-funded NZ$12.23 million (incl. GST) STRATUS research project – NZ’s largest scientific research grant in the field of computer science. Dr Ko publishes extensively, in indexed academic journals, ranked computer science conference proceedings, international patents, and most recently, co-edited the book on “The Cloud Security Ecosystem – Technical, Legal, Business and Management Issues” with Elsevier. Dr Ko also leads virtualized server security standardization as a technical committee member of the ISO/IEC JTC 1/SC 27 and SPRING/ IDA IT Standards Committee SPSTC.</p><p>Prior to his academic career, Dr Ko was a lead computer scientist with HP Labs, leading security innovation and technology transfers for cloud data provenance solutions deployed across USA, EU and Asia. He serves as a technical advisor and board members to NZ listed companies, startups and international organisations, including the NZX-listed LIC, NYRIAD Ltd, and the INTERPOL. Dr Ko holds a B.Eng. (Computer Engineering) (Hons.) and a Ph.D. with the Nanyang Technological University, Singapore, and is member of the IEEE, ACM and the Royal Society of New Zealand.</p><p><strong>Contributions</strong>: Co-founder and chair of the Cloud Vulnerabilities Working Group and the CSA Cloud Data Governance Working Group; spearheaded the formation of the CSA APAC Education Council, contributed to several key research papers; acted as an SME representing CSA in the creation of the CCSP certification.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="David Lingenfelter Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MzgwMCwicHVyIjoiYmxvYl9pZCJ9fQ==--a24c2b79caee1b70c82f6ba2e77209bd6c051049/david-lingenfelter-a5d1c8fed8fa80dbbdf9ed77f1f4c68c.jpg" /></div><div class="o-media"><h3>David Lingenfelter</h3><h6>Security and Compliance, MaaS360</h6><div class="b-limited-content"><p>David is a seasoned security professional with nearly 20 years of experience in risk management, information security, compliance, and policy development. Throughout his career David has performed risk and vulnerability assessments along with making recommendations on network and system design improvements. David’s career has spanned from traditional hardware based security architectures to cloud technologies and virtual environments.</p><p>Currently in charge of security and compliance for MaaS360 by IBM, David has managed projects to get Fiberlink SAS70-Type2 and more recently SOC2 Type II. David also recently led Fiberlink through audits to receive Federal Information Security Management Act (FISMA) authorization from GSA for Fiberlink’s MaaS360 Cloud Service offering. David also lead MaaS360 through the FedRAMP JAB ATO process, becoming the first mobile SaaS companies to be certified under FedRAMP. Fiberlink’s customers range from the SME space to Fortune 500 and Federal customers. David has helped ensure that MaaS360 meets the different requirements from these different types of customers including PCI, HIPAA, SoX, and NIST.</p><p>David helped design MaaS360’s cloud architecture model, and is an active member of the Cloud Security Alliance including being a co-chair for their Mobile Working Group and contributor to the development of the CSA Cloud Control Matrix as well as being active in several other working groups. David is also the president of the local chapter of the Cloud Security Alliance in the Delaware Valley. Along with work with the Cloud Security Alliance David is a member of the NIST Cloud working groups including their Mobile working group and CyberSecurity working group.</p><p>Prior to Fiberlink David worked as a security consultant performing security assessments and project management for multiple fortune 500 companies including Merck, CIGNA, Campbell Soup, Sanofi-Aventis and Wyeth (later purchased by Pfizer). This included overseeing projects that were involved with mergers as was the case with Rhone Poulenc and Sanofi-Aventis and separations as with CIGNA and ACE. David frequently gives presentations on Cloud and Mobile technologies and has presented for ISACA, ISSA, Cloud Security Alliance, InfraGard and GTRA among others. David received the 2012 Ron Knode Service Award for volunteer services at the Cloud Security Alliance and was awarded the “Most Dynamic Speaker” award at the 2012 annual GTRA Security in Government event. David has also been quoted as a subject matter expert in a number of different publications. David is a graduate from Fairleigh Dickenson University with a Bachelor of Science in Electrical Engineering.</p><p><strong>Contributions</strong>: Co-chair of the Mobile Working Group; co-founder of IoT Working Group; contributor to CCM and Subject Matter Expert Working Groups. President of the CSA Delaware Valley Chapter. Contributor to multiple online publications and served as a speaker on behalf of CSA at third-party events, including InfraGard and ISACA.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Kevin Fielder Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTI2OCwicHVyIjoiYmxvYl9pZCJ9fQ==--75fbbfadaec0d841c440621ec73ac63bdb6a3295/kevin-fielder.jpg" /></div><div class="o-media"><h3>Kevin Fielder</h3><h6>Senior Manager Cyber Security at Worldpay</h6><div class="b-limited-content"><p>Kevin Fielder has over 15 years IT and security experience across multiple industries encompassing online trading, online supermarkets, banking/finance/insurance. His various roles have included pen testing and security assessments through technical and security architecture to security consulting and innovations.</p><p>Current focus includes security strategy, secure design and development, security innovations, software based mobile security, cloud policy and architecture, structured risk assessments, and of course his role as co-chair of the SecaaS working group.</p><p>He holds a Bachelors degree in Computing with Human Biology and a Masters in Distributed Systems and Networks, along with various industry certifications such as CISSP-ISSAP, CISSP-ISSMP, C|EH, ISEB enterprise and solutions architecture.</p></div></div></div></div></div><div class="c-card"><div class="c-card__item"><div class="o-media"><div class="o-media__left"><img alt="Bernd Jaeger Headshot" class="headshot" width="200px" src="/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6NDEzNiwicHVyIjoiYmxvYl9pZCJ9fQ==--f887980f559ec4b578f37cd85725c47dddb0dbb1/bernd-jaeger-72d6ba9812a6215584c8ffa1b3182c42.jpg" /></div><div class="o-media"><h3>Bernd Jaeger</h3><h6>Colt (Germany)</h6><div class="b-limited-content"><p>Working for more than 20 years within the ICT industry, focussing on information security, Bernd’s scope ranges from security management related activities down to a deep, “hands-on” level of understanding of today’s threats and countermeasures.</p><p>Working for Telecommunication-, Internet-, Cloud and Technology Service provider, Bernd designed and implemented highly customized security solutions, developed technical blueprints and products, conducted security audits and penetration tests,and introduced new technologies, trained employees and customers as well as provided internal and external consultancy at all times. In addition to that he had been part of Cyber Security Incident Response Teams supporting forensics, malwareand application vulnerability testing.</p><p>His most recent work is focused on security architectures for the software defined (virtualized) future of data centre and network services in a provider environment and as member of the “Office of the CTO” writing strategic technology papers andguidance to the executive committee.</p><p>As chair of the Telecom Working Group and contributor to variety of research initiatives within the Cloud Security Alliance, as speaker at conferences and writer, Bernd is actively supporting the international research community, promotingbest practice and knowledge. In 2012 he received the Ron Knode Service Award recognizes excellence in volunteerism and is awarded in memory of Ron Knode, a cherished member of the CSA community.</p><p><strong>Contributions</strong>: Co-chair of the Telecom Working Group; member of the Virtualization Working Group; founding member of the Incident Management & Forensic Working Group and contributor to several of its publications.</p></div></div></div></div></div></div></div></div></main><footer class="c-layout-footer"><div class="o-area"><div class="cookie-banner" style="display: block;"><div data-controller="dynamic-content"><div class="c-notification c-notification--info" id="cookie-banner-main"><div class="c-notification__item c-notification__item--icon"><div class="fas fa-info-circle"></div></div><div class="c-notification__item"><p><strong>We value your privacy.</strong> <span>Our website uses analytics and advertising cookies to improve your browsing experience. Read our full</span> <a href="/legal/privacy-notice/">Privacy Policy</a><span>.</span></p><div class="c-button-group c-button-group--centered u-mb16"><a class="c-button c-button--gray" data-action="click->dynamic-content#update" data-dynamic-content-hide-param="#cookie-banner-main" data-dynamic-content-show-param="#cookie-banner-customize" href="#">Customize</a><a class="c-button c-button--blue" id="cookie-banner-accept-all" data-action="cookie-consent#acceptAll" data-controller="cookie-consent" href="#">Allow</a></div></div></div><div class="c-notification c-notification--info" id="cookie-banner-customize" style="display: none;"><div class="c-notification__item c-notification__item--icon"><div class="fas fa-info-circle"></div></div><div class="c-notification__item"><p class="u-pt12" style="line-height: 1.3em; font-size: 1.2em;"><strong>About the Cookies</strong></p><form class="c-form" data-action="cookie-consent#update" data-controller="cookie-consent" action="/research/juanita-koilpillai/service-award" accept-charset="UTF-8" method="post"><input type="hidden" name="authenticity_token" value="qo-2gcO3aExCfdFepXwwVpZyOueU1UNG3fo51Zw40C5YD9S2pHp1ymFjCW2mIXO7bFIqEsbPgQY9h_G_y5xm4A" autocomplete="off" /><p><strong>Analytics cookies,</strong> from <a target="_blank" href="https://analytics.google.com/">Google Analytics</a> and <a target="_blank" href="https://clarity.microsoft.com/">Microsoft Clarity</a> help us analyze site usage to continuously improve our website.</p><div class="c-form__item-group c-form__item-group--duo c-form__item-group--checkbox--big"><div class="c-form__item"><input id="analytics" type="checkbox" value="1" checked="checked" name="analytics" /></div><div class="c-form__item c-form__item--label"><label for="analytics">Enable cookies for analytics.</label></div></div><p class="u-pt12"><strong>Advertising cookies,</strong> enable <a target="_blank" href="https://policies.google.com/privacy">Google</a> to collect information to display content and ads tailored to your interests.</p><div class="c-form__item-group c-form__item-group--duo c-form__item-group--checkbox--big"><div class="c-form__item"><input id="advertising" type="checkbox" value="1" checked="checked" name="advertising" /></div><div class="c-form__item c-form__item--label"><label for="advertising">Enable cookies for advertising.</label></div></div><div class="c-button-group c-button-group--centered u-mb16 u-mt16"><a class="c-button c-button--gray" id="cookie-banner-reject-all" data-action="cookie-consent#rejectAll" data-controller="cookie-consent" href="#">Decline All</a><input type="submit" name="commit" value="Confirm" class="c-button c-button--blue" data-disable-with="Confirm" /></div></form></div></div></div></div><div class="c-footer"><div class="o-container"><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="c-footer__item o-grid__cell o-grid__cell--width-30@medium u-align-left"><div class="c-footer__logo u-separate"><img src="/assets/csa-logo-white-33c6ce89081b4488f9fe480c8e4f5e662f8a9723e5467d30359ff832c269b7d6.png" /></div><p class="u-separate"><a class="c-button c-button--social-circle c-button--linkedin" target="_blank" rel="noopener" href="https://www.linkedin.com/groups/1864210/profile"><img src="/assets/social-share/li-icon-09fa81c48d4329077ed9608610eb94677c1598373b57333973e931874e641c30.svg" /></a><a class="c-button c-button--social-circle c-button--twitter" target="_blank" rel="noopener" href="https://twitter.com/intent/tweet?text=&url="><img src="/assets/social-share/x-icon-d5737d8484c6d1c6b2c18ad43c18037db1925464c40f14899cdfdb82fe33a861.svg" /></a><a class="c-button c-button--social-circle c-button--facebook" target="_blank" rel="noopener" href="https://www.facebook.com/csacloudfiles"><img src="/assets/social-share/fb-icon-c0307da13019b8e4ef32e5f2e7039eac01c272bcbc2c3a7aad4ba033c0a27153.svg" /></a><a class="c-button c-button--social-circle c-button--youtube" target="_blank" rel="noopener" href="https://www.youtube.com/channel/UCrcG6ZtsBPz3xkUZU6asVhA"><img src="/assets/social-share/yt-icon-ade320bf2b6ffeae084895dac740b736c7dda9f181a871260f83da2462465ab3.svg" /></a><p class="u-separate"><span>© 2009–</span><span>2024</span> <span>Cloud Security Alliance.</span><br /><span>All rights reserved.</span></p></p></div><div class="c-footer__item o-grid__cell"><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="o-grid__cell"><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Corporate Membership - https://cloudsecurityalliance.org/membership/"});" href="https://cloudsecurityalliance.org/membership/">Corporate Membership</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Cloud Customers - https://cloudsecurityalliance.org/membership/enterprises/"});" href="https://cloudsecurityalliance.org/membership/enterprises/">Cloud Customers</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Cloud Solution Providers - https://cloudsecurityalliance.org/membership/solution-providers/"});" href="https://cloudsecurityalliance.org/membership/solution-providers/">Cloud Solution Providers</a></div><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Join as an Individual - https://circle.cloudsecurityalliance.org/home"});" href="https://circle.cloudsecurityalliance.org/home">Join as an Individual</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Circle Community Forum - https://cloudsecurityalliance.org/circle/"});" href="https://cloudsecurityalliance.org/circle/">Circle Community Forum</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Chapters - https://cloudsecurityalliance.org/chapters/"});" href="https://cloudsecurityalliance.org/chapters/">Chapters</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Working Groups - https://cloudsecurityalliance.org/research/working-groups/"});" href="https://cloudsecurityalliance.org/research/working-groups/">Working Groups</a></div><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Research - https://cloudsecurityalliance.org/research/"});" href="https://cloudsecurityalliance.org/research/">Research</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Download Publications - https://cloudsecurityalliance.org/research/artifacts/"});" href="https://cloudsecurityalliance.org/research/artifacts/">Download Publications</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"View Working Groups - https://cloudsecurityalliance.org/research/working-groups/"});" href="https://cloudsecurityalliance.org/research/working-groups/">View Working Groups</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"View All Topics - https://cloudsecurityalliance.org/research/topics"});" href="https://cloudsecurityalliance.org/research/topics">View All Topics</a></div><div class="c-footer__list"><h6><span>Find a...</span></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Cloud Consultant - https://cloudsecurityalliance.org/trusted-cloud-consultant"});" href="https://cloudsecurityalliance.org/trusted-cloud-consultant">Cloud Consultant</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Cloud Service Provider - https://cloudsecurityalliance.org/star/registry/"});" data-turbo="false" href="https://cloudsecurityalliance.org/star/registry/">Cloud Service Provider</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Trusted Cloud Provider - https://cloudsecurityalliance.org/trusted-cloud-provider"});" href="https://cloudsecurityalliance.org/trusted-cloud-provider">Trusted Cloud Provider</a></div></div><div class="o-grid__cell"><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Certificates - https://cloudsecurityalliance.org/education/"});" href="https://cloudsecurityalliance.org/education/">Certificates</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"CCSK - https://cloudsecurityalliance.org/education/ccsk/"});" href="https://cloudsecurityalliance.org/education/ccsk/">CCSK</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"CCAK - https://cloudsecurityalliance.org/education/ccak/"});" href="https://cloudsecurityalliance.org/education/ccak/">CCAK</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"CCZT - https://cloudsecurityalliance.org/education/cczt/"});" href="https://cloudsecurityalliance.org/education/cczt/">CCZT</a></div><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Events - https://cloudsecurityalliance.org/events/"});" href="https://cloudsecurityalliance.org/events/">Events</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Americas - https://cloudsecurityalliance.org/events/americas"});" href="https://cloudsecurityalliance.org/events/americas">Americas</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"EMEA - https://cloudsecurityalliance.org/events/emea/"});" href="https://cloudsecurityalliance.org/events/emea/">EMEA</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"APAC - https://cloudsecurityalliance.org/events/apac/"});" href="https://cloudsecurityalliance.org/events/apac/">APAC</a></div><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Education - https://cloudsecurityalliance.org/education/"});" href="https://cloudsecurityalliance.org/education/">Education</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Blog - https://cloudsecurityalliance.org/blog/"});" href="https://cloudsecurityalliance.org/blog/">Blog</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Virtual Events \u0026 Webinars - https://cloudsecurityalliance.org/events/virtual-and-webinars/"});" data-turbo="false" href="https://cloudsecurityalliance.org/events/virtual-and-webinars/">Virtual Events & Webinars</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Training - https://cloudsecurityalliance.org/education/"});" href="https://cloudsecurityalliance.org/education/">Training</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Cloud 101 - https://cloudsecurityalliance.org/cloud-newbie"});" href="https://cloudsecurityalliance.org/cloud-newbie">Cloud 101</a></div><div class="c-footer__list"><h6><span>Popular Resources</span></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Security Guidance - https://cloudsecurityalliance.org/research/guidance/"});" href="https://cloudsecurityalliance.org/research/guidance/">Security Guidance</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"CCM - https://cloudsecurityalliance.org/research/cloud-controls-matrix/"});" href="https://cloudsecurityalliance.org/research/cloud-controls-matrix/">CCM</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"CAIQ - https://cloudsecurityalliance.org/research/cloud-controls-matrix/"});" href="https://cloudsecurityalliance.org/research/cloud-controls-matrix/">CAIQ</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"STAR - https://cloudsecurityalliance.org/star/"});" href="https://cloudsecurityalliance.org/star/">STAR</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"GDPR - https://cloudsecurityalliance.org/privacy/gdpr/"});" href="https://cloudsecurityalliance.org/privacy/gdpr/">GDPR</a></div></div><div class="o-grid__cell"><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"About CSA - https://cloudsecurityalliance.org/about/"});" href="https://cloudsecurityalliance.org/about/">About CSA</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Contact Us - https://cloudsecurityalliance.org/contact/"});" href="https://cloudsecurityalliance.org/contact/">Contact Us</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Press Releases - https://cloudsecurityalliance.org/press-releases/"});" href="https://cloudsecurityalliance.org/press-releases/">Press Releases</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Affiliates - https://cloudsecurityalliance.org/membership/current-affiliates/"});" href="https://cloudsecurityalliance.org/membership/current-affiliates/">Affiliates</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Press Coverage - https://cloudsecurityalliance.org/press-coverage/"});" href="https://cloudsecurityalliance.org/press-coverage/">Press Coverage</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Quality Policy - https://cloudsecurityalliance.org/quality-policy/"});" href="https://cloudsecurityalliance.org/quality-policy/">Quality Policy</a></div><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Our Team - https://cloudsecurityalliance.org/about/csa-staff/"});" href="https://cloudsecurityalliance.org/about/csa-staff/">Our Team</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Board of Directors - https://cloudsecurityalliance.org/about/board-of-directors/"});" data-turbo="false" href="https://cloudsecurityalliance.org/about/board-of-directors/">Board of Directors</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Management \u0026 Staff - https://cloudsecurityalliance.org/about/csa-staff/"});" data-turbo="false" href="https://cloudsecurityalliance.org/about/csa-staff/">Management & Staff</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Careers - https://cloudsecurityalliance.org/about/careers"});" href="https://cloudsecurityalliance.org/about/careers">Careers</a></div><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Legal - https://cloudsecurityalliance.org/legal/"});" href="https://cloudsecurityalliance.org/legal/">Legal</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Privacy Notice - https://cloudsecurityalliance.org/legal/privacy-notice/"});" href="https://cloudsecurityalliance.org/legal/privacy-notice/">Privacy Notice</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Terms \u0026 Conditions - https://cloudsecurityalliance.org/legal/website-terms-and-conditions/"});" href="https://cloudsecurityalliance.org/legal/website-terms-and-conditions/">Terms & Conditions</a></div><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Cloud Security Glossary - https://cloudsecurityalliance.org/cloud-security-glossary/"});" href="https://cloudsecurityalliance.org/cloud-security-glossary/">Cloud Security Glossary</a></h6></div></div></div></div></div></div></div><div class="u-scroll-to-top"><span class="c-button c-button--primary c-button--elevated">&utrif;</span></div></div></footer><div class="c-modal"><div class="c-modal__content"></div><span class="c-modal__close-button"></span></div> <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=2121b371-8db3-4beb-8ca2-5e994ec5fb73"></script> <script type="text/javascript"> var isDesktop = true; // device detection if(/(android|bb\d+|meego).+mobile|avantgo|bada\/|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od)|ipad|iris|kindle|Android|Silk|lge |maemo|midp|mmp|netfront|opera m(ob|in)i|palm( os)?|phone|p(ixi|re)\/|plucker|pocket|psp|series(4|6)0|symbian|treo|up\.(browser|link)|vodafone|wap|windows (ce|phone)|xda|xiino/i.test(navigator.userAgent) || /1207|6310|6590|3gso|4thp|50[1-6]i|770s|802s|a wa|abac|ac(er|oo|s\-)|ai(ko|rn)|al(av|ca|co)|amoi|an(ex|ny|yw)|aptu|ar(ch|go)|as(te|us)|attw|au(di|\-m|r |s )|avan|be(ck|ll|nq)|bi(lb|rd)|bl(ac|az)|br(e|v)w|bumb|bw\-(n|u)|c55\/|capi|ccwa|cdm\-|cell|chtm|cldc|cmd\-|co(mp|nd)|craw|da(it|ll|ng)|dbte|dc\-s|devi|dica|dmob|do(c|p)o|ds(12|\-d)|el(49|ai)|em(l2|ul)|er(ic|k0)|esl8|ez([4-7]0|os|wa|ze)|fetc|fly(\-|_)|g1 u|g560|gene|gf\-5|g\-mo|go(\.w|od)|gr(ad|un)|haie|hcit|hd\-(m|p|t)|hei\-|hi(pt|ta)|hp( i|ip)|hs\-c|ht(c(\-| |_|a|g|p|s|t)|tp)|hu(aw|tc)|i\-(20|go|ma)|i230|iac( |\-|\/)|ibro|idea|ig01|ikom|im1k|inno|ipaq|iris|ja(t|v)a|jbro|jemu|jigs|kddi|keji|kgt( |\/)|klon|kpt |kwc\-|kyo(c|k)|le(no|xi)|lg( g|\/(k|l|u)|50|54|\-[a-w])|libw|lynx|m1\-w|m3ga|m50\/|ma(te|ui|xo)|mc(01|21|ca)|m\-cr|me(rc|ri)|mi(o8|oa|ts)|mmef|mo(01|02|bi|de|do|t(\-| |o|v)|zz)|mt(50|p1|v )|mwbp|mywa|n10[0-2]|n20[2-3]|n30(0|2)|n50(0|2|5)|n7(0(0|1)|10)|ne((c|m)\-|on|tf|wf|wg|wt)|nok(6|i)|nzph|o2im|op(ti|wv)|oran|owg1|p800|pan(a|d|t)|pdxg|pg(13|\-([1-8]|c))|phil|pire|pl(ay|uc)|pn\-2|po(ck|rt|se)|prox|psio|pt\-g|qa\-a|qc(07|12|21|32|60|\-[2-7]|i\-)|qtek|r380|r600|raks|rim9|ro(ve|zo)|s55\/|sa(ge|ma|mm|ms|ny|va)|sc(01|h\-|oo|p\-)|sdk\/|se(c(\-|0|1)|47|mc|nd|ri)|sgh\-|shar|sie(\-|m)|sk\-0|sl(45|id)|sm(al|ar|b3|it|t5)|so(ft|ny)|sp(01|h\-|v\-|v )|sy(01|mb)|t2(18|50)|t6(00|10|18)|ta(gt|lk)|tcl\-|tdg\-|tel(i|m)|tim\-|t\-mo|to(pl|sh)|ts(70|m\-|m3|m5)|tx\-9|up(\.b|g1|si)|utst|v400|v750|veri|vi(rg|te)|vk(40|5[0-3]|\-v)|vm40|voda|vulc|vx(52|53|60|61|70|80|81|83|85|98)|w3c(\-| )|webc|whit|wi(g |nc|nw)|wmlb|wonu|x700|yas\-|your|zeto|zte\-/i.test(navigator.userAgent.substr(0,4))) { isDesktop = false; } window.zESettings = { webWidget: { color: { launcherText: '#FFFFFF' } } }; var customizeWidget = function () { // Dodge Recaptcha when it also exists on the page if (typeof grecaptcha !== 'undefined') { $('#launcher').animate({'margin-right': '80px'}); }; }; setTimeout(customizeWidget, 2000); </script> </body></html>