Trending...
- OneVizion Launches Vera AI, Bringing Connected Operational Context to Infrastructure Teams
- Spokane: SFD's 8th Annual Kids Jr Firefighter Academy
- Applicants Sought for the Tacoma Arts Commission and the Tacoma Creates Advisory Board
SEATTLE--(BUSINESS WIRE)--The Cloud Security Alliance (CSA), the world's leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud computing environment, today released Cloud Key Management System with External Origin Key. Written by the Cloud Key Management Working Group to help organizations optimize such business outcomes as security, agility, cost, and compliance, the paper provides general guidance for choosing, planning, and deploying cloud-native key management systems (KMS) in cases where organizations either want to or must import key material (e.g., keys, vaults, secrets, policies) from an external source.
"A cloud service provider's KMS often has strong ties to its other cloud services, and this same cloud-native KMS using EKO can be used with a customer's on-premises technologies and cloud services from other providers. Unsurprisingly, integrating a cloud KMS with an organization's assets spanning traditional private data centers, as well as private and public cloud services in various geographic locations presents a host of challenges," said Paul Rich, co-chair of the Cloud Key Management Working Group and one of the paper's authors. "It's our hope that after reading this document, program and project managers who have been tasked with leading their organization through the selection, planning, and deployment stages of cloud-native KMS using EKO will be able map considerations to their organization."
More on Washingtoner
The guidance addresses the technical, operational, legal, regulatory, and financial aspects of leveraging a cloud-native KMS using external key origin (EKO) for each of the three stages of the lifecycle (choosing, planning, and deploying). Each aspect is broken down into further considerations and their accompanying justifications. Because cloud-native key management systems using EKO are relatively new, there isn't a large repository of best practices from which to draw. This guidance, therefore, combines best practices drawn from experience with traditional key management systems, cloud services in general, and cloud-native key management systems.
For further reading, Key Management in Cloud Services: Understanding Encryption's Desired Outcomes and Limitations provides the foundation for the choice of cloud KMS pattern and general guidance for using KMS whether the KMS is native to a cloud platform, external, self-operated, or yet another cloud service. Additionally, Recommendations for Adopting a Cloud-Native Key Management System provides more specific guidance for choosing, planning, and deploying cloud-native key management systems.
The Cloud Key Management Working Group aims to facilitate the standards for seamless integration between cloud service providers and key broker services. Those interested in participating in future research and initiatives involving cloud key management are invited to join the working group.
More on Washingtoner
Download Cloud Key Management System with External Origin Key now.
About Cloud Security Alliance
The Cloud Security Alliance (CSA) is the world's leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment. CSA harnesses the subject matter expertise of industry practitioners, associations, governments, and its corporate and individual members to offer cloud security-specific research, education, training, certification, events, and products. CSA's activities, knowledge, and extensive network benefit the entire community impacted by cloud — from providers and customers to governments, entrepreneurs, and the assurance industry — and provide a forum through which different parties can work together to create and maintain a trusted cloud ecosystem. For further information, visit us at www.cloudsecurityalliance.org, and follow us on Twitter @cloudsa.
Contacts
Media Contacts
Kristina Rundquist for the CSA
kristina@zagcommunications.com
"A cloud service provider's KMS often has strong ties to its other cloud services, and this same cloud-native KMS using EKO can be used with a customer's on-premises technologies and cloud services from other providers. Unsurprisingly, integrating a cloud KMS with an organization's assets spanning traditional private data centers, as well as private and public cloud services in various geographic locations presents a host of challenges," said Paul Rich, co-chair of the Cloud Key Management Working Group and one of the paper's authors. "It's our hope that after reading this document, program and project managers who have been tasked with leading their organization through the selection, planning, and deployment stages of cloud-native KMS using EKO will be able map considerations to their organization."
More on Washingtoner
- Mom Era, Still That Girl: Family Art Tees 25% Off
- Fashion vs. Fascism - Because Democracy Should Always Be In Style
- Lee Gunn IV Shares Lessons From 40 Years in the Courtroom on PodNumbra Podcast
- Michael H. Kaplan Recognized for 17 Years on PHPA Workers' Compensation Panel and Advocacy for Professional Athletes
- City of Spokane Announces New Tools, Resources to Support Fire Recovery and Rebuilding
The guidance addresses the technical, operational, legal, regulatory, and financial aspects of leveraging a cloud-native KMS using external key origin (EKO) for each of the three stages of the lifecycle (choosing, planning, and deploying). Each aspect is broken down into further considerations and their accompanying justifications. Because cloud-native key management systems using EKO are relatively new, there isn't a large repository of best practices from which to draw. This guidance, therefore, combines best practices drawn from experience with traditional key management systems, cloud services in general, and cloud-native key management systems.
For further reading, Key Management in Cloud Services: Understanding Encryption's Desired Outcomes and Limitations provides the foundation for the choice of cloud KMS pattern and general guidance for using KMS whether the KMS is native to a cloud platform, external, self-operated, or yet another cloud service. Additionally, Recommendations for Adopting a Cloud-Native Key Management System provides more specific guidance for choosing, planning, and deploying cloud-native key management systems.
The Cloud Key Management Working Group aims to facilitate the standards for seamless integration between cloud service providers and key broker services. Those interested in participating in future research and initiatives involving cloud key management are invited to join the working group.
More on Washingtoner
- Tacoma Residents Invited to Turn Recycled Glass Into Art Through New Pilot Program
- International Society of Medical AI Convenes Global Faculty in Florence for ISMAI 2026
- Boston Industrial Solutions Introduces Personalized Printing Training
- Century Fasteners de Mexico Exhibiting at the 2026 Automotive & Aerospace Nearshoring Summit
- Spokane: Funding Available for Tourism and Culture Investment Grants
Download Cloud Key Management System with External Origin Key now.
About Cloud Security Alliance
The Cloud Security Alliance (CSA) is the world's leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment. CSA harnesses the subject matter expertise of industry practitioners, associations, governments, and its corporate and individual members to offer cloud security-specific research, education, training, certification, events, and products. CSA's activities, knowledge, and extensive network benefit the entire community impacted by cloud — from providers and customers to governments, entrepreneurs, and the assurance industry — and provide a forum through which different parties can work together to create and maintain a trusted cloud ecosystem. For further information, visit us at www.cloudsecurityalliance.org, and follow us on Twitter @cloudsa.
Contacts
Media Contacts
Kristina Rundquist for the CSA
kristina@zagcommunications.com
0 Comments
Latest on Washingtoner
- Tacoma: OMWBE Certification 201 Workshop on September 28
- Super Rooter Expands to 190 Plumbing, Sewer, and Drain Service Locations Across the United States
- European Patent for ALS Program Expands the Story: HOPE Deploys Robotic TMS & FDA Commercialization Path Advances: NRx Pharmaceuticals: NAS DAQ: NRXP
- VICTURY Sports Announces Formation of Youth Sports League Built on the Official, Patented, and Award-Winning Keepy Uppy® Ball
- Congressman Chuck Edwards (NC-11) Presents ReadyCommunities Partnership 2026 National Service Award to Local Businessman / US Air Force Veteran
- Cress Creeks Farm Opens Fall Corn Maze and Baby Lamb Hayride Experience in Ellijay, Georgia
- Allstream Energy Partners Nominated in Multiple Categories for Fast Company's Best Workplaces for Innovators
- Pebble Photo Booths Brings Modern Photo Experiences to Vancouver, Washington
- Spokane: Flags at Half-Staff in Remembrance of 9/11 Victims
- Haven Treatment Center Now In-Network with First Choice, Expanding Access to Youth Health
- Kerri Lawless Introduces New Home-Selling Option for Local Homeowners
- FDA-Cleared Zeta TMS Robotic System Moves Toward Deployment as FDA, DARPA and Commercial Catalysts Converge: NRx Pharmaceuticals (N A S D A Q: NRXP)
- Baird Medical Turns Global Expansion Into Tangible Growth: N A S D A Q: BDMD Posts 25% Revenue Surge as U.S. and International Markets Accelerate
- City of Spokane Launches 'Emergency Streets' Pilot Program
- Spokane: City Seeks Feedback on Future Land Use Map
- Shelter Structures America makes European debut at TEMPOR EXPO 2026 in Fulda, Germany
- Longevity Academy Announces J.P. Medved of Longevity Advice as Next Guest in the Longevity Leaders
- Medcurity Introduces a Better Way for Healthcare and Its Vendors to Build Trust
- Haven Treatment Center Now In-Network Partnership with Aetna, Expanding Access to Youth Health Care
- Applicants Sought for the Tacoma Arts Commission and the Tacoma Creates Advisory Board