CSA study materials
CSA study resources

CSA (Other exams) case studies

CSA · Put your knowledge to work in context.

The CSA abbreviation is shared by several unrelated credentials: a security-architect certification, an entry-level cybersecurity analyst certification, and a ServiceNow system-administrator certification. This page describes a vendor-neutral security architect credential spanning eight domains: foundations and governance; risk, compliance, and frameworks; identity and access management; network security architecture and segmentation; cloud and virtualization security; data protection and cryptography; application security; and security operations and incident response. It suits engineers and analysts moving into design roles, consultants who translate business requirements into control architectures, and administrators who need to justify design decisions to auditors and executives. Expect scenario-based multiple-choice items that test judgment rather than recall: choosing between defense-in-depth options, mapping controls to framework requirements, or spotting a flawed trust boundary in a described design. The CSA case studies are 5 cases and about 3,223 words.

1

Post-Merger Architecture Governance at NorthBridge Retail

NorthBridge Retail acquired a smaller online competitor, and the board has mandated a unified security architecture within 18 months. NorthBridge runs a 4,000-server on-premises data center with a monolithic ERP and a 12-year-old PKI; the acquired company is cloud-native on AWS with 600 microservices and uses cloud KMS.

712 words, about 4 min
2

Risk Appetite and Control Mapping at PayLoom

PayLoom processes 2.5 million card transactions per day and is subject to PCI DSS v4.0, GDPR, and SOC 2 Type II. It runs 140 microservices, 60 in PCI scope.

719 words, about 4 min
3

Identity Architecture at Mercy Valley Health

Mercy Valley Health has 22,000 staff, 7,000 affiliated physicians, and 3,000 contractors. Active Directory is on-premises, Okta provides SSO to 80 SaaS apps, but 15 clinical applications still use LDAP and local accounts.

640 words, about 3 min
4

OT/IT Segmentation at Titan Manufacturing

Titan Manufacturing has 12 plants with a flat IT and OT network. A ransomware infection on a corporate laptop spread to a plant HMI and halted production for 36 hours.

585 words, about 3 min
5

Multi-Cloud Guardrails at CloudScribe

CloudScribe is a SaaS provider running 280 AWS accounts and Azure subscriptions across two business units. It has 2,000 IAM roles and no central cloud security posture management.

567 words, about 3 min