Trending...
- Tacoma: Street Closures Projected to Start August 25 for Residential Street Restoration Program Maintenance Work
- Spokane: City Council Approves Mayor's Orders for Declaration of Emergency
- City of Spokane Receives $1 Million in Wildfire Housing Assistance
SEATTLE--(BUSINESS WIRE)--The Cloud Security Alliance (CSA), the world's leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud computing environment, today released Cloud Key Management System with External Origin Key. Written by the Cloud Key Management Working Group to help organizations optimize such business outcomes as security, agility, cost, and compliance, the paper provides general guidance for choosing, planning, and deploying cloud-native key management systems (KMS) in cases where organizations either want to or must import key material (e.g., keys, vaults, secrets, policies) from an external source.
"A cloud service provider's KMS often has strong ties to its other cloud services, and this same cloud-native KMS using EKO can be used with a customer's on-premises technologies and cloud services from other providers. Unsurprisingly, integrating a cloud KMS with an organization's assets spanning traditional private data centers, as well as private and public cloud services in various geographic locations presents a host of challenges," said Paul Rich, co-chair of the Cloud Key Management Working Group and one of the paper's authors. "It's our hope that after reading this document, program and project managers who have been tasked with leading their organization through the selection, planning, and deployment stages of cloud-native KMS using EKO will be able map considerations to their organization."
More on Washingtoner
The guidance addresses the technical, operational, legal, regulatory, and financial aspects of leveraging a cloud-native KMS using external key origin (EKO) for each of the three stages of the lifecycle (choosing, planning, and deploying). Each aspect is broken down into further considerations and their accompanying justifications. Because cloud-native key management systems using EKO are relatively new, there isn't a large repository of best practices from which to draw. This guidance, therefore, combines best practices drawn from experience with traditional key management systems, cloud services in general, and cloud-native key management systems.
For further reading, Key Management in Cloud Services: Understanding Encryption's Desired Outcomes and Limitations provides the foundation for the choice of cloud KMS pattern and general guidance for using KMS whether the KMS is native to a cloud platform, external, self-operated, or yet another cloud service. Additionally, Recommendations for Adopting a Cloud-Native Key Management System provides more specific guidance for choosing, planning, and deploying cloud-native key management systems.
The Cloud Key Management Working Group aims to facilitate the standards for seamless integration between cloud service providers and key broker services. Those interested in participating in future research and initiatives involving cloud key management are invited to join the working group.
More on Washingtoner
Download Cloud Key Management System with External Origin Key now.
About Cloud Security Alliance
The Cloud Security Alliance (CSA) is the world's leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment. CSA harnesses the subject matter expertise of industry practitioners, associations, governments, and its corporate and individual members to offer cloud security-specific research, education, training, certification, events, and products. CSA's activities, knowledge, and extensive network benefit the entire community impacted by cloud — from providers and customers to governments, entrepreneurs, and the assurance industry — and provide a forum through which different parties can work together to create and maintain a trusted cloud ecosystem. For further information, visit us at www.cloudsecurityalliance.org, and follow us on Twitter @cloudsa.
Contacts
Media Contacts
Kristina Rundquist for the CSA
kristina@zagcommunications.com
"A cloud service provider's KMS often has strong ties to its other cloud services, and this same cloud-native KMS using EKO can be used with a customer's on-premises technologies and cloud services from other providers. Unsurprisingly, integrating a cloud KMS with an organization's assets spanning traditional private data centers, as well as private and public cloud services in various geographic locations presents a host of challenges," said Paul Rich, co-chair of the Cloud Key Management Working Group and one of the paper's authors. "It's our hope that after reading this document, program and project managers who have been tasked with leading their organization through the selection, planning, and deployment stages of cloud-native KMS using EKO will be able map considerations to their organization."
More on Washingtoner
- Gigasoft 2026 JavaScript Chart Comparison: ProEssentials, Highcharts, SciChart, LightningChart, ECharts
- Experienced eXp Realty Agent Kerri Lawless Guides Buyers and Sellers Through Life's Next Chapters in St. Tammany Parish
- Supreme Garage Door Repair Redirects Marketing Dollars Into North Texas Communities
- Spokane: Flags Lowered in Honor of Dolly Parton
- RAS AP Consulting Spotlights Managed AP Governance™ at Esker All Access
The guidance addresses the technical, operational, legal, regulatory, and financial aspects of leveraging a cloud-native KMS using external key origin (EKO) for each of the three stages of the lifecycle (choosing, planning, and deploying). Each aspect is broken down into further considerations and their accompanying justifications. Because cloud-native key management systems using EKO are relatively new, there isn't a large repository of best practices from which to draw. This guidance, therefore, combines best practices drawn from experience with traditional key management systems, cloud services in general, and cloud-native key management systems.
For further reading, Key Management in Cloud Services: Understanding Encryption's Desired Outcomes and Limitations provides the foundation for the choice of cloud KMS pattern and general guidance for using KMS whether the KMS is native to a cloud platform, external, self-operated, or yet another cloud service. Additionally, Recommendations for Adopting a Cloud-Native Key Management System provides more specific guidance for choosing, planning, and deploying cloud-native key management systems.
The Cloud Key Management Working Group aims to facilitate the standards for seamless integration between cloud service providers and key broker services. Those interested in participating in future research and initiatives involving cloud key management are invited to join the working group.
More on Washingtoner
- Kent Youth And Family Services Names Omar Malik As New Executive Director
- Spokane: SPD Seek Assistance in Locating Missing Vulnerable Adult Female
- ANSI BSR Upholds Appeal of AFDE Member Andrew Sulner, MSFS, JD, finding the AAFS Academy Standards Board (ASB) Violated ANSI Essential Requirements
- Haven Treatment Center Surprises Team Member with New Bicycle After Transportation Challenge
- Kentucky's Plane Crash Data Lands Far from the State's Busiest Airports
Download Cloud Key Management System with External Origin Key now.
About Cloud Security Alliance
The Cloud Security Alliance (CSA) is the world's leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment. CSA harnesses the subject matter expertise of industry practitioners, associations, governments, and its corporate and individual members to offer cloud security-specific research, education, training, certification, events, and products. CSA's activities, knowledge, and extensive network benefit the entire community impacted by cloud — from providers and customers to governments, entrepreneurs, and the assurance industry — and provide a forum through which different parties can work together to create and maintain a trusted cloud ecosystem. For further information, visit us at www.cloudsecurityalliance.org, and follow us on Twitter @cloudsa.
Contacts
Media Contacts
Kristina Rundquist for the CSA
kristina@zagcommunications.com
0 Comments
Latest on Washingtoner
- Diginyze eCommerce ERP Module Creates Single Source of Truth for Enterprise Operations
- CasaPerks and CredHub Partner to Help the Multifamily Industry Strengthen Resident Activation Through Credit-Building Rewards
- NaturismRE expands international research programme with Health & Wellbeing Survey
- Tacoma: Applications Now Being Accepted for a Position on the Planning Commission
- L2 Aviation and Gotonomi Extend UAV Connectivity Beyond Cellular Reach
- Tacoma: Hylebos Bridge Closed Today for Maintenance Work
- Democratic Candidate Daria Ilgen Announces Taxpayer Accountability Standard for New Taxes
- Re:InvestorHub Launches the First AI-Powered Operating System Built for Real Estate Investors
- Nadi Plumbing Leads Charlotte in Private Fire Hydrant Services, Eyes Regional Expansion
- FindCostSeg Launches Nationwide Directory for Cost Segregation Providers
- Master Of Science, Juggernaut Of The Screen: Landon Brittain Emerges As Hollywood's Most Unlikely Leading Man
- Black Dog Venture Partners and VC Fast Pitch to Host "San Francisco Investors and Innovators" Networking Event
- ExtraCarry Adds Pocket-Carry Holder for POM Pepper Spray
- City of Spokane Receives $1 Million in Wildfire Housing Assistance
- New Book, The KI of Marketing, Helps Small Businesses Grow Without Trying to Outspend Bigger Competitors
- ExtraCarry Adds .327 Federal Magnum to Speed Strip Pocket Holder Lineup
- Tacoma: Street Closures Projected to Start August 25 for Residential Street Restoration Program Maintenance Work
- Food Journal Magazine Focuses Its Los Angeles Dining Coverage Across Three Editorial Verticals
- Gravity Payments and Suno Software Partner to Simplify Payments for Independent Hearing Clinics
- Where Do Missouri Plane Crashes Really Happen? Not Where You'd Think