CRITICAL SAAS SIG
.png)
What is the Critical SaaS SIG?
The Critical SaaS (CSaaS) SIG serves as a forum for CSaaS companies to collaborate on a collective defense strategy to improve the security and operational resiliency of their services and share intelligence information with the industry at large. It aims to increase the level of trust that customers can place in their organizations and the SaaS sector. The CSaaS SIG enables companies who are essential to the internet to share cyber threat intelligence and effective security practices. It also provides a framework for these companies to collaborate on future security issues.
SIG Membership
Members of the CSaaS SIG provide essential services that a vast array of critical infrastructure operators rely on for core operations. The following companies are founding members of the SIG.
2024 Holiday Advisory
During the most festive time of year, it's easy to get distracted. But organizations must be careful to maintain their cyber defenses and stay vigilant even - and especially - through the holidays. The IT-ISAC CSaaS SIG recommends making your list and checking it twice to protect you from not-so-nice cyber threats with this advisory for the holiday season.
Shared Responisbility Paper
Understanding the Shared Responsibility Model is imperative for effectively securing your information in a critical SaaS (CSaaS) environment. In this collaboratively authored paper, the CSaaS SIG provides guidance and outlines questions to ask to ensure both providers and end users know their responsibilities.
Secure By Design Comments
The CSaaS SIG has collaboratively authored and submitted comments in response to CISA’s RFI on their recently published Secure by Design Whitepaper. The full comments can be viewed below.
.png)
%20(6).png)
Resources
​
For more information or to submit an application, please contact membership@it-isac.org.