The CIS Software Supply Chain Security Guide, developed in collaboration with Aqua Security, offers over 100 foundational security recommendations aimed at safeguarding the software supply chain across various technologies and… Read More »CIS Software Supply Chain Security Guide
NIST SP 800-161 Rev. 1, titled “Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations,” offers comprehensive guidance for organizations to identify, assess, and mitigate cybersecurity risks across their… Read More »NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations
The CIS Controls Cloud Companion Guide v8 provides detailed guidance on applying the security best practices from CIS Controls version 8 to cloud environments from the consumer or customer perspective.… Read More »CIS Controls Cloud Companion Guide v8
The Zero Trust Maturity Questionnaire is designed to help organizations evaluate their current level of Zero Trust implementation across key security domains. It assesses maturity in areas such as identities,… Read More »MicroSoft Zero Trust Maturity Questionnaire
This community-led framework identifies the most critical security risks inherent in Continuous Integration and Continuous Deployment (CI/CD) ecosystems, which have become prime targets for supply chain attacks. It provides a… Read More »OWASP Top 10 CI/CD Security Risks
NIST SP 800-218, the Secure Software Development Framework (SSDF), provides a set of high-level, fundamental practices designed to integrate security throughout the software development lifecycle (SDLC). The framework is organized… Read More »NIST SP 800-218 Secure Software Development Framework (SSDF)
The CISA Zero Trust Maturity Model (ZTMM) is a comprehensive framework designed to guide organizations, particularly federal agencies, in transitioning from traditional perimeter-based security to a zero trust architecture, which… Read More »CISA Zero Trust Maturity Model
The CSA publication “Practical Preparations for the Post-Quantum World” by the Quantum-Safe Security working group of the Cloud Security Alliance addresses the emerging cybersecurity challenges posed by the advent of… Read More »CSA Practical Preparations for the Post-Quantum World ★★★★★
The OWASP Top Ten is a widely recognized list that highlights the ten most critical security risks facing web applications today. Updated every few years by security experts, the list… Read More »OWASP Top Ten ★★★★★
The Cloud Security Alliance Cloud Controls Matrix (CSA CCM) is a comprehensive cybersecurity control framework specifically designed for cloud computing environments. It consists of 197 control objectives organized into 17… Read More »CSA Cloud Controls Matrix (CCM) v4 ★★★★★