Cloud Controls Matrix

  • 1.  CCM-Lite based on CCM V4 set for Open Peer Review (until May 15th)

    Posted Mar 14, 2023 09:32:00 AM

    Dear members,

    Here is the link to access the CCM-Lite spreadsheet.

    You feedback is very welcome!

    Thank you,

    Lefteris



    ------------------------------
    Eleftherios Skoutaris
    Program Manager
    Cloud Security Alliance
    ------------------------------


  • 2.  RE: CCM-Lite based on CCM V4 set for Open Peer Review (until May 15th)

    Posted Mar 17, 2023 05:21:00 AM

    Hi Eleftherios. I have two questions.

    Q1. You have CAIQ-Lite based on CAIQ V3. So are you going to make CAIQ-Lite based on CAIQ V4 too after making the CCM-Lite?

    Q2. Do you have any criterion to select controls for the CCM-Lite? If yes, please share them with me.



    ------------------------------
    Masahiro Haneda CCSK, CCSP and CISSP
    Security Consultant
    NRI SecureTechnologies Ltd.
    Tokyo
    ------------------------------

    Original Message


  • 3.  RE: CCM-Lite based on CCM V4 set for Open Peer Review (until May 15th)

    Posted Mar 20, 2023 08:08:00 AM

    Hi Masahiro,

    On Q1, answer is Yes. A CAIQ V4-Lite is to be directly derived from CCM V4-Lite.

    On Q2, the CCM V4-Lite controls' selection process is based on multiple variables, including primarily the latest CSA top threats report, and the feedback collected from CCM WG and its Co-chairs. The CCM-Lite project is aligned with CSA's Research Lifecycle that enables the extensive engagement of CSA partners and the wider Cloud community to ensure the quality of the end deliverable.

    Happy to provide more details if needed.

    Thank you,

    Lefteris



    ------------------------------
    Eleftherios Skoutaris
    Program Manager
    Cloud Security Alliance
    ------------------------------

    Original Message