Trending...
- Final Week to Register for Free Spokane Community Conference
- Author Robert A. Robinson Introduces Anarchy at the AYP:
- Air Force Veteran Sean Douglas Delivers Powerful Suicide Prevention Presentations to Hundreds of Marines at Camp Pendleton
SEATTLE--(BUSINESS WIRE)--The Cloud Security Alliance (CSA), the world's leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud computing environment, today released Cloud Key Management System with External Origin Key. Written by the Cloud Key Management Working Group to help organizations optimize such business outcomes as security, agility, cost, and compliance, the paper provides general guidance for choosing, planning, and deploying cloud-native key management systems (KMS) in cases where organizations either want to or must import key material (e.g., keys, vaults, secrets, policies) from an external source.
"A cloud service provider's KMS often has strong ties to its other cloud services, and this same cloud-native KMS using EKO can be used with a customer's on-premises technologies and cloud services from other providers. Unsurprisingly, integrating a cloud KMS with an organization's assets spanning traditional private data centers, as well as private and public cloud services in various geographic locations presents a host of challenges," said Paul Rich, co-chair of the Cloud Key Management Working Group and one of the paper's authors. "It's our hope that after reading this document, program and project managers who have been tasked with leading their organization through the selection, planning, and deployment stages of cloud-native KMS using EKO will be able map considerations to their organization."
More on Washingtoner
The guidance addresses the technical, operational, legal, regulatory, and financial aspects of leveraging a cloud-native KMS using external key origin (EKO) for each of the three stages of the lifecycle (choosing, planning, and deploying). Each aspect is broken down into further considerations and their accompanying justifications. Because cloud-native key management systems using EKO are relatively new, there isn't a large repository of best practices from which to draw. This guidance, therefore, combines best practices drawn from experience with traditional key management systems, cloud services in general, and cloud-native key management systems.
For further reading, Key Management in Cloud Services: Understanding Encryption's Desired Outcomes and Limitations provides the foundation for the choice of cloud KMS pattern and general guidance for using KMS whether the KMS is native to a cloud platform, external, self-operated, or yet another cloud service. Additionally, Recommendations for Adopting a Cloud-Native Key Management System provides more specific guidance for choosing, planning, and deploying cloud-native key management systems.
The Cloud Key Management Working Group aims to facilitate the standards for seamless integration between cloud service providers and key broker services. Those interested in participating in future research and initiatives involving cloud key management are invited to join the working group.
More on Washingtoner
Download Cloud Key Management System with External Origin Key now.
About Cloud Security Alliance
The Cloud Security Alliance (CSA) is the world's leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment. CSA harnesses the subject matter expertise of industry practitioners, associations, governments, and its corporate and individual members to offer cloud security-specific research, education, training, certification, events, and products. CSA's activities, knowledge, and extensive network benefit the entire community impacted by cloud — from providers and customers to governments, entrepreneurs, and the assurance industry — and provide a forum through which different parties can work together to create and maintain a trusted cloud ecosystem. For further information, visit us at www.cloudsecurityalliance.org, and follow us on Twitter @cloudsa.
Contacts
Media Contacts
Kristina Rundquist for the CSA
kristina@zagcommunications.com
"A cloud service provider's KMS often has strong ties to its other cloud services, and this same cloud-native KMS using EKO can be used with a customer's on-premises technologies and cloud services from other providers. Unsurprisingly, integrating a cloud KMS with an organization's assets spanning traditional private data centers, as well as private and public cloud services in various geographic locations presents a host of challenges," said Paul Rich, co-chair of the Cloud Key Management Working Group and one of the paper's authors. "It's our hope that after reading this document, program and project managers who have been tasked with leading their organization through the selection, planning, and deployment stages of cloud-native KMS using EKO will be able map considerations to their organization."
More on Washingtoner
- Spokane: SPD Seek Community Assistance in Locating Missing 10-Year-Old
- WOWX labs Closes US$10 Million Founder-Led Growth Financing as WOWX.market Enters Scale Phase
- BESTBUYSTORE opens its dropshipping model to independent merchants
- America's Hometown Thanksgiving Parade in Plymouth, MA, on Saturday, November 21, 2026
- Navigating a Changing Market: How AIX Group Is Responding to a Challenging Year
The guidance addresses the technical, operational, legal, regulatory, and financial aspects of leveraging a cloud-native KMS using external key origin (EKO) for each of the three stages of the lifecycle (choosing, planning, and deploying). Each aspect is broken down into further considerations and their accompanying justifications. Because cloud-native key management systems using EKO are relatively new, there isn't a large repository of best practices from which to draw. This guidance, therefore, combines best practices drawn from experience with traditional key management systems, cloud services in general, and cloud-native key management systems.
For further reading, Key Management in Cloud Services: Understanding Encryption's Desired Outcomes and Limitations provides the foundation for the choice of cloud KMS pattern and general guidance for using KMS whether the KMS is native to a cloud platform, external, self-operated, or yet another cloud service. Additionally, Recommendations for Adopting a Cloud-Native Key Management System provides more specific guidance for choosing, planning, and deploying cloud-native key management systems.
The Cloud Key Management Working Group aims to facilitate the standards for seamless integration between cloud service providers and key broker services. Those interested in participating in future research and initiatives involving cloud key management are invited to join the working group.
More on Washingtoner
- 450 Million Revenue Run Rate, Global Telecom Reach and a New Digital Growth Opportunity Take Center Stage: IQSTEL, Inc. (N A S D A Q: IQST)
- Wave Helicopters Takes FLIBS 2026 to New Heights
- Canada's First Data Lakehouse Goes Global in Banking: Nabil Bank Becomes Nepal's First Bank to Implement a True Agentic Lakehouse Platform, DataNature
- Latin GRAMMY-Winning Cuban-American Conductor Dr Yalil Guerra to Lead Pepperdine's Oklahoma!
- Highsfield Showcases Earth Zoom Generator for Cinematic AI Videos
Download Cloud Key Management System with External Origin Key now.
About Cloud Security Alliance
The Cloud Security Alliance (CSA) is the world's leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment. CSA harnesses the subject matter expertise of industry practitioners, associations, governments, and its corporate and individual members to offer cloud security-specific research, education, training, certification, events, and products. CSA's activities, knowledge, and extensive network benefit the entire community impacted by cloud — from providers and customers to governments, entrepreneurs, and the assurance industry — and provide a forum through which different parties can work together to create and maintain a trusted cloud ecosystem. For further information, visit us at www.cloudsecurityalliance.org, and follow us on Twitter @cloudsa.
Contacts
Media Contacts
Kristina Rundquist for the CSA
kristina@zagcommunications.com
0 Comments
Latest on Washingtoner
- RAS AP Consulting Releases Educational Resource to Help Organizations Prepare for IRS FIRE-to-IRIS Transition
- Roots, Rhythm & Joy Invites Neighbors to Find Community Through Music
- Tacoma: Homicide Investigation – 1100 Commerce Street
- Former Goddard Enterprises Managing Director Anthony Ali Joins STS Capital Partners as Managing Director and Partner
- Heritage at Manalapan Announces Limited-Time Mortgage Rate Buydown on Select Quick Move-In Homes
- Good Organics Now at Pop Up Grocer NYC With October 30 Sampling Event
- KeysCaribbean Announces Temporarily Reduced Rates At Village at Hawks Cay Villas
- Commercial Manufacturing Validation Completed as November 10 FDA Milestone Approaches; Critical FDA Milestone Close: NRx Pharmaceuticals NAS DAQ: NRXP
- Electives Launches "Electives for Everyone," Making Live Expert-Led Learning Available to Every Employee
- Tax Tops the List as Wealthy Brits Plan Their Exit, La Vida Survey Finds
- FloorLine Launches Live Shop Floor Tracking for Small Manufacturers
- "The Tree of Cinema" Installation Brought Film History and Its Audiences Together at TIFF 2026
- Detroit Lawyer Steals $600,000 Settlement Meant to Protect Child
- The TOPS Trap: Local AI Models Hallucinated Facts, Cited Real Sources, and Sounded Confident
- Final Week to Register for Free Spokane Community Conference
- Heritage at South Brunswick Announces Special Townhome Mortgage Rate Buydown
- Heritage at Hopewell Announces Limited-Time Mortgage Rate Buydown on Select Quick Move-In Townhomes
- Air Force Veteran Sean Douglas Delivers Powerful Suicide Prevention Presentations to Hundreds of Marines at Camp Pendleton
- Breathwork Certification in Seattle, Washington State: First Pacific Northwest Date Set
- Author Robert A. Robinson Introduces Anarchy at the AYP: