Cloud Controls Matrix
Empowering Cloud Confidence: Your Blueprint for Secure Cloud Environments.
CSA Fundamental Security Principles
The Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) is a framework designed to provide fundamental security principles for guiding cloud vendors and assisting prospective customers in assessing overall security risk. It maps directly to leading compliance standards, regulations, and frameworks.
Key Security Domains
Application and Interface Security
Controls related to the security of cloud application interfaces and APIs.
Audit Assurance and Compliance
Controls addressing audit logging, compliance with standards, and assurance of security controls.
Business Continuity Management and Operational Resilience
Controls related to business continuity planning and operational resilience in the cloud environment.
Change Control and Configuration Management
Controls for managing changes and configurations in the cloud infrastructure.
Data Security and Information Lifecycle Management
Controls focusing on the protection and management of data throughout its lifecycle.
Governance and Risk Management
Controls related to governance, risk management, and compliance in the cloud environment.
Human Resources Security
Controls addressing security considerations related to personnel, roles, and responsibilities.
Incident Management, and Forensics
Controls for responding to incidents and conducting forensics in a cloud environment.
Infrastructure and Virtualization Security
Controls related to the security of the cloud infrastructure and virtualization technologies.
Security Incident Management, E-Discovery, and Cloud Forensics
Controls for handling security incidents, e-discovery, and forensics.
Cross-Framework Mapping
CCM provides authoritative mappings to other industry-accepted security standards and frameworks, simplifying compliance across multiple jurisdictions.
Strategic Use Cases
Stay Current with Cloud Standards
The CSA periodically updates its materials to reflect changes in the cloud security landscape. For the latest documentation and resources, visit the official alliance portal.
cloudsecurityalliance.org