There is another publication from CSA that focus on Blockchain; definitely recommend reading.
"Cryptocurrencies and other blockchain virtual assets have been the target of the majority of Distributed Ledger Technology (DLT) attacks and a variety of threat vectors over the past twelve and a half years since the birth of bitcoin. Many of these threat vectors will target similar vulnerabilities as DLTs are deployed for financial technology (FinTech) and enterprise blockchain applications. These Top 10 DLT Attacks from the early days of virtual assets provide illustrative examples and costly lessons that can help develop blockchain applications that are protected from the top 10 attacks. Those attacks include: Exchange Hack, DeFi Hack, 51% Attack, Phishing, Rug Pull/Exit Scam, Ransomware, Investment Scam, High Profile Doubler Scam, Extortion, Fraudulent Services Key Takeaways: An understand of 10 popular DLT/blockchain attack The best practices to defend against attacks Concrete examples and case studies for each attack "
https://cloudsecurityalliance.org/artifacts/top-10-blockchain-attacks-vulnerabilities-weaknesses/------------------------------
Bert Valle
------------------------------
Original Message:
Sent: Sep 24, 2021 08:17:53 AM
From: B V
Subject: Publications
What if you could assess the security of your 3rd party service providers in real time?Take a look on CSA's continuous auditing certification.
"The CSA Continuous Auditing Certification (aka STAR Level 3) is the most rigorous assurance tier in the STAR program. Level 3 certified services providers can demonstrate critical security controls are monitored and validated continuously providing customers with the ultimate level of transparency and assurance. Continuous security controls auditing and certification delivers best-in-class security transparency and assurance customers need in an ever-changing threat landscape."
https://cloudsecurityalliance.org/artifacts/evolution-of-star-introducing-continuous-auditing/
------------------------------
BV
------------------------------