Cloud Controls Matrix

Expand all | Collapse all

CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

  • 1.  CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Feb 16, 2023 02:20:00 AM

    Dear members,
    CSA and the CCM WG would like to embark on a new mapping project that involves a mapping and gap analysis between the 
    CCM v4.0 and PCI DSS V4. The project is expected to kick-off during the CCM WG call on March 1st.

    The objective of the project is the requirements comparison of the 2 frameworks. In this way an opportunity is provided for cloud organizations to identify the equivalent (overlapping) security requirements between the two, and more importantly the missing cloud-specific CCM security requirements (deltas) in PCI DSS, especially when seeking to integrating these within their cloud security and compliance programs.

    In this respect, CSA, and under the umbrella of the CCM WG, would like to put together a team of experts, who have good experience in the implementation/assessment of PCI DSS, and/or CCMv4 security controls.

    Should you be interested in participating in this project, 
    reply directly to this message (or contact me directly) and I will walk you through the on-boarding process and mapping methodology.

    Best regards,



    ------------------------------
    Eleftherios Skoutaris
    Program Manager
    Cloud Security Alliance
    ------------------------------


  • 2.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Feb 17, 2023 09:12:00 AM

    Hi Eleftherios,

    Please keep me in the loop for this mapping activity.
    I will try to attend weekly meeting to gather additional details from you.

    Thanks,
    Suranjit Paul



    ------------------------------
    Suranjit Paul
    Manager, Information Security (R&D)
    Fortinet Technologies (Canada) ULC.
    ------------------------------



  • 3.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Feb 17, 2023 09:52:00 AM

    Hi Lefteris,

    Please keep me in the loop for this mapping activity.

    Thanks,

    Vani Murth






  • 4.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Feb 18, 2023 08:52:00 AM
    Hi,.

    Please keep me in the loop for mapping and also, update for AI Cybersecurity mapping plan.






  • 5.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Feb 19, 2023 12:09:00 AM
    Me too, Lefteris.
    Regards
    Agni





  • 6.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Feb 20, 2023 01:08:00 AM

    Hi Eleftherios,

    I would be interested to in participating in this project. Will appreciate if you can let me know the on-boarding process

    Thanks & Regards

    Amit Butail



    ------------------------------
    Amit Butail
    ------------------------------



  • 7.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Feb 21, 2023 07:12:00 AM
    I am also interested 





  • 8.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Feb 22, 2023 07:38:00 AM
    Hi Eleftherios,

    I would be interested as well.

    Kind regards,
    Lukas





  • 9.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Feb 20, 2023 01:08:00 AM

    Hi,

    please include me in discussion and process , I'm interested.

     



    ------------------------------
    Hadir Labib
    ------------------------------



  • 10.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Feb 20, 2023 03:50:00 AM
    Hi, 

    I am interested. Please include me

    Regards
    Amit Butail 





  • 11.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Feb 21, 2023 07:37:00 AM

    Hi, Eleftherios,

    I am also interested.

    Thanks & Regards.



    ------------------------------
    현호 장
    Senior Researcher
    Tatum
    ------------------------------



  • 12.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Feb 22, 2023 04:06:00 AM

    I would like to contribute.

    FYI - I have already converted the PCI DSS 4.0 Defined Approach sub requirements into excel format



    ------------------------------
    Sandip Roy Chowdhury
    Director
    SCB
    ------------------------------



  • 13.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Feb 22, 2023 07:12:00 AM

    Hi Leftherios,

    Please keep me in the loop.

    Thanks & Regards,

    Rogelio



    ------------------------------
    Rogelio Chavez
    1132
    1132
    ------------------------------



  • 14.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Feb 22, 2023 07:17:00 AM

    Hello,

    and many thanks for your interest in contributing to our mapping project.

    Please consider joining our CCM call on March 1st (call info to join can be found in 'Events' tab above).

    Looking forward to seeing you there.



    ------------------------------
    Eleftherios Skoutaris
    Program Manager
    Cloud Security Alliance
    ------------------------------



  • 15.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Feb 22, 2023 08:20:00 AM

    Please also keep me in the loop for the mapping.



    ------------------------------
    Ron Palladino
    Security Risk & Awareness Program Manager
    IEEE
    ------------------------------



  • 16.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Feb 23, 2023 12:46:00 AM
    Hi,

    I am interested in joining this group. Sorry I have been MIA for a while. I'll appreciate it if I am added to the group. 

    Beat regards,

    Tola





  • 17.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Mar 02, 2023 07:18:00 AM

    Hi,

    I would be happy to support the effort.



    ------------------------------
    Alexander Norell
    Global Security Architect
    VikingCloud
    ------------------------------



  • 18.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Mar 03, 2023 01:10:00 PM

    Would be happy to assist.

    Johnny Hernandez
    Sr Information Security Officer - Truist
    Card Services



    ------------------------------
    Johnny H
    Sr Information Security Officer
    Truist
    ------------------------------



  • 19.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Mar 06, 2023 01:01:00 AM

    Dear all,

    Mapping of CCMv4 to PCI DSS V4 has kicked off, last Thursday, March 1st.

    There are still couple of slots open, should you wish to participate & contribute.

    Please consider joining our next CCM WG call (March 9th) to sign up. Call info to join can be found in the 'Events' tab here above.

    Thank you,

    Lefteris



    ------------------------------
    Eleftherios Skoutaris
    Program Manager
    Cloud Security Alliance
    ------------------------------



  • 20.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Mar 07, 2023 07:08:00 AM
    Hello,

    Please count me in

    Kind regards

    M. Yacouba BAMBA

    ***********************************************************************************************
    Ce message et toutes les pièces jointes sont confidentiels et établis à
    l'intention exclusive de son ou ses destinataires. Si vous avez reçu ce message
    par erreur, merci d'en avertir immédiatement l'émetteur et de détruire le message.
    Toute modification, édition, utilisation ou diffusion non autorisée est interdite.
    L'émetteur décline toute responsabilité au titre de ce message s'il a été modifié,
    déformé, falsifié, infecté par un virus ou encore édité ou diffusé sans autorisation.
    ________________________________________________________________
    This message and any attachments are confidential and intended for the named
    addressee(s) only. If you have received this message in error, please notify
    immediately the sender, then delete the message. Any unauthorized modification,
    edition, use or dissemination is prohibited.
    The sender does not be liable for this message if it has been modified, altered,
    falsified, infected by a virus or even edited or disseminated without authorization.
    ***********************************************************************************************








  • 21.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Mar 08, 2023 06:24:00 PM
    Hi,

    Please count me in

    Regards
    Amit Butail





  • 22.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Mar 09, 2023 11:33:00 AM
    Count me in! 





  • 23.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Mar 06, 2023 08:13:00 AM

    Count me in please. 



    ------------------------------
    Muhamed Mujicic
    ISO
    Private
    ------------------------------



  • 24.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Mar 12, 2023 06:57:00 PM

    I would be happy to assist.



    ------------------------------
    Brian Dorsey Solutions Engineer CCSK / AWS Security Specialist
    ------------------------------



  • 25.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Mar 13, 2023 03:52:00 AM

    Please join our CCM WG calls coming up this week, March 15th or 16th to discuss ways of you involvement in the mapping.

    Call info to join are found in the 'Events' tab, here above.

    Thanks,

    Lefteris



    ------------------------------
    Eleftherios Skoutaris
    Program Manager
    Cloud Security Alliance
    ------------------------------



  • 26.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Apr 12, 2023 02:34:00 AM

    Dear members,

    Would like to invite you to participate in & contribute to the mapping project of CCM V4 to PCI DSS V4.

    Mapping is progressing well, however we are lacking progress in some of the domains, namely:
    • Business Continuity Management & Operational Resilience (BCR)
    • Interoperability & Portability (IPY)
    • Supply Chain Management, Transparency, and Accountability (STA)
    • Universal Endpoint Management (UEM)

    Should you be interested, contact me directly to onboard you to the project and walk you through the mapping methodology.

    Thank you,



    ------------------------------
    Eleftherios Skoutaris
    Program Manager
    Cloud Security Alliance
    ------------------------------



  • 27.  RE: CCMv4.0 – PCI DSS V4 Mapping (Call for participation)

    Posted Apr 18, 2023 03:03:00 AM

    Hello Eleftherios,

    I'd like to participate. Please keep if you can walk me through the onbording process it would be great.

    Thanks,
    Ivan



    ------------------------------
    Ivan Casacuberta
    Cybersecurity Auditor Manager
    CaixaBank
    ------------------------------