Trending...
- Spokane: SPD Arrest Level III Registered Sex Offender for Failure to Register - 141
- Spokane: PPE Available to Those Returning Home After New Evacuation Downgrades
- Spokane Police Respond to a Vehicle vs. Pedestrian
SEATTLE--(BUSINESS WIRE)--The Cloud Security Alliance (CSA), the world's leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud computing environment, today released Cloud Key Management System with External Origin Key. Written by the Cloud Key Management Working Group to help organizations optimize such business outcomes as security, agility, cost, and compliance, the paper provides general guidance for choosing, planning, and deploying cloud-native key management systems (KMS) in cases where organizations either want to or must import key material (e.g., keys, vaults, secrets, policies) from an external source.
"A cloud service provider's KMS often has strong ties to its other cloud services, and this same cloud-native KMS using EKO can be used with a customer's on-premises technologies and cloud services from other providers. Unsurprisingly, integrating a cloud KMS with an organization's assets spanning traditional private data centers, as well as private and public cloud services in various geographic locations presents a host of challenges," said Paul Rich, co-chair of the Cloud Key Management Working Group and one of the paper's authors. "It's our hope that after reading this document, program and project managers who have been tasked with leading their organization through the selection, planning, and deployment stages of cloud-native KMS using EKO will be able map considerations to their organization."
More on Washingtoner
The guidance addresses the technical, operational, legal, regulatory, and financial aspects of leveraging a cloud-native KMS using external key origin (EKO) for each of the three stages of the lifecycle (choosing, planning, and deploying). Each aspect is broken down into further considerations and their accompanying justifications. Because cloud-native key management systems using EKO are relatively new, there isn't a large repository of best practices from which to draw. This guidance, therefore, combines best practices drawn from experience with traditional key management systems, cloud services in general, and cloud-native key management systems.
For further reading, Key Management in Cloud Services: Understanding Encryption's Desired Outcomes and Limitations provides the foundation for the choice of cloud KMS pattern and general guidance for using KMS whether the KMS is native to a cloud platform, external, self-operated, or yet another cloud service. Additionally, Recommendations for Adopting a Cloud-Native Key Management System provides more specific guidance for choosing, planning, and deploying cloud-native key management systems.
The Cloud Key Management Working Group aims to facilitate the standards for seamless integration between cloud service providers and key broker services. Those interested in participating in future research and initiatives involving cloud key management are invited to join the working group.
More on Washingtoner
Download Cloud Key Management System with External Origin Key now.
About Cloud Security Alliance
The Cloud Security Alliance (CSA) is the world's leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment. CSA harnesses the subject matter expertise of industry practitioners, associations, governments, and its corporate and individual members to offer cloud security-specific research, education, training, certification, events, and products. CSA's activities, knowledge, and extensive network benefit the entire community impacted by cloud — from providers and customers to governments, entrepreneurs, and the assurance industry — and provide a forum through which different parties can work together to create and maintain a trusted cloud ecosystem. For further information, visit us at www.cloudsecurityalliance.org, and follow us on Twitter @cloudsa.
Contacts
Media Contacts
Kristina Rundquist for the CSA
kristina@zagcommunications.com
"A cloud service provider's KMS often has strong ties to its other cloud services, and this same cloud-native KMS using EKO can be used with a customer's on-premises technologies and cloud services from other providers. Unsurprisingly, integrating a cloud KMS with an organization's assets spanning traditional private data centers, as well as private and public cloud services in various geographic locations presents a host of challenges," said Paul Rich, co-chair of the Cloud Key Management Working Group and one of the paper's authors. "It's our hope that after reading this document, program and project managers who have been tasked with leading their organization through the selection, planning, and deployment stages of cloud-native KMS using EKO will be able map considerations to their organization."
More on Washingtoner
- Buy Retatrutide Research Peptide: Why Reta Is Getting So Much Attention
- Stage 2 Burn Ban Order in Effect Across Tacoma
- San Diego Attorney Anthony Z. Vargas Narrows Practice to Employment Law, Representing Employees Only
- Spokane: Additional PPE Kits Available Tuesday and Thursday
- Solid Earth Introduces RealtyID, a Universal Identity Spine for the Real Estate Industry
The guidance addresses the technical, operational, legal, regulatory, and financial aspects of leveraging a cloud-native KMS using external key origin (EKO) for each of the three stages of the lifecycle (choosing, planning, and deploying). Each aspect is broken down into further considerations and their accompanying justifications. Because cloud-native key management systems using EKO are relatively new, there isn't a large repository of best practices from which to draw. This guidance, therefore, combines best practices drawn from experience with traditional key management systems, cloud services in general, and cloud-native key management systems.
For further reading, Key Management in Cloud Services: Understanding Encryption's Desired Outcomes and Limitations provides the foundation for the choice of cloud KMS pattern and general guidance for using KMS whether the KMS is native to a cloud platform, external, self-operated, or yet another cloud service. Additionally, Recommendations for Adopting a Cloud-Native Key Management System provides more specific guidance for choosing, planning, and deploying cloud-native key management systems.
The Cloud Key Management Working Group aims to facilitate the standards for seamless integration between cloud service providers and key broker services. Those interested in participating in future research and initiatives involving cloud key management are invited to join the working group.
More on Washingtoner
- BlazeHive's AI SEO Agent Outranks Human Writers on 500+ Google Top-3 Results in 5 Months, on Autopilot
- Cracking the Immortality Code: A Human / AI Long-Term Collaboration Working to Achieve Immortality
- On the Boards: Proform Builds Announce New Construction in Alki, Seattle
- On the Boards: Proform Builds Announce New Construction in Gig Harbor
- Phinge Exposes Massive AI Security Risks, Claiming Its Patented Hardware-Verified Architecture Is The Only Safeguard Against Surveillance Capitalism
Download Cloud Key Management System with External Origin Key now.
About Cloud Security Alliance
The Cloud Security Alliance (CSA) is the world's leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment. CSA harnesses the subject matter expertise of industry practitioners, associations, governments, and its corporate and individual members to offer cloud security-specific research, education, training, certification, events, and products. CSA's activities, knowledge, and extensive network benefit the entire community impacted by cloud — from providers and customers to governments, entrepreneurs, and the assurance industry — and provide a forum through which different parties can work together to create and maintain a trusted cloud ecosystem. For further information, visit us at www.cloudsecurityalliance.org, and follow us on Twitter @cloudsa.
Contacts
Media Contacts
Kristina Rundquist for the CSA
kristina@zagcommunications.com
0 Comments
Latest on Washingtoner
- Hollywood In Pixels Announces Honorees for The 9th Silver PIXel Awards
- New Research Finds a Good Deal Is All It Takes to Get Americans Booking a Last-Minute Vacation — and Most Already Have One on Their Mind
- GitKraken Introduces GitLens 19, Bringing Human and AI Workflows Together in One Workbench
- LĪNA Universal Balm Nominated for "Best Clean Skincare Product" at CertClean Beauty Awards
- Spokane: SPD Arrest Level III Registered Sex Offender for Failure to Register
- SPD Detectives Investigating Suspicious Deaths in Northeast Spokane
- Bronze Stevie Award Recognizes Satyadhar Joshi for AI Research and Public Policy Engagement
- synseer Nominated for Best Startup in 2026 Prix Galien USA Awards Following Record Breaking Applicant Pool
- Leading PDR Training Courses in Canada: Learn Paintless Dent Repair with PDR Academy & Tint Academy
- Tacoma: Update Second Homicide Arrest – 2100 block of N 30th St
- Move in this Fall! New Released Quick Move-In Townhomes at Heritage at South Brunswick with Limited-Time Incentives
- Statement by Tacoma City Council Member John Hines on Advancing a Regional Effort to Address Animal Overpopulation
- Crossroads4Hope Marks 25 Years Ensuring No One Faces Cancer Alone At its Inspiring Hope Gala
- Q1 2026 Arizona Technology Industry Impact Report Recaps Advanced Manufacturing Growth, High-Value Jobs and Workforce Investment
- Spokane Police Respond to Midday Shooting on STA Bus
- Sparta Services' Dave Galy Named to CRN's 2026 Next-Gen Solution Provider Leaders List
- Former Prosecutor Opens Stegall Law in Summerville
- Vboost Celebrates 14 years of Automotive Viral Marketing
- Spokane: Notice of Intent to Make a Section 4(f) De Minimis Impact Determination
- Spokane Complex Fire Parks & Recreation update 08-12-26