Consensus Assessment (CAIQ)

  • 1.  CAIQ-Lite version control and archive

    Posted Mar 01, 2022 06:27:00 AM
    The CAIQ-Lite questionnaire has changed over time. The only version of it that I can find available for public download does not have a version number.

     https://cloudsecurityalliance.org/artifacts/caiq-lite

    In addition, the release date indicated on the download page does not match the date in the file name:

    I am trying to manage my organization's questionnaire responses in a database, and I need to identify which version of a question is being answered. Does CAIQ-Lite have some version-control scheme, or archive of all released versions?

    Thanks,

    Chris Ursich


  • 2.  RE: CAIQ-Lite version control and archive

    Posted Mar 09, 2022 12:45:00 AM
    Edited by Lefteris Skoutaris Mar 09, 2022 12:44:47 AM
    Hi Christopher,
    The CAIQ-Lite you are referring to is based on CCMv3.0.1, which is to be withdrawn January 2023.
    Would highly recommend attempting a transition to CAIQv4 that is based on the latest release of the Cloud Controls Matrix version 4.

    CCMv4 substantially differs from CCMv3.0.1 and thereafter the corresponding CAIQ questionnaires. Would recommend consulting the mapping between CCMv4.0 and CCMv3.0.1 for identifying the aligned control requirements between the two.

    Feel free to reach out if you have more questions.

    Best regards,
    Lefteris

    ------------------------------
    Eleftherios Skoutaris
    Program Manager
    Cloud Security Alliance
    ------------------------------