Cloud Controls Matrix v3.0.1
IDNameThreats
AIS-01Application SecuritySTRIDE-LM
AIS-02Customer Access RequirementsSTRIDE-LM
AIS-03Data IntegritySTRIDE-LM
AIS-04Data Security / IntegritySTRIDE-LM
AAC-01Audit PlanningSTRIDE-LM
AAC-02Independent AuditsSTRIDE-LM
AAC-03Information System Regulatory MappingSTRIDE-LM
BCR-01Business Continuity PlanningSTRIDE-LM
BCR-02Business Continuity TestingSTRIDE-LM
BCR-03Datacenter Utilities / Environmental ConditionsSTRIDE-LM
BCR-04DocumentationSTRIDE-LM
BCR-05Environmental RisksSTRIDE-LM
BCR-06Equipment LocationSTRIDE-LM
BCR-07Equipment MaintenanceSTRIDE-LM
BCR-08Equipment Power FailuresSTRIDE-LM
BCR-09Impact AnalysisSTRIDE-LM
BCR-10PolicySTRIDE-LM
BCR-11Retention PolicySTRIDE-LM
CCC-01New Development / AcquisitionSTRIDE-LM
CCC-02Outsourced DevelopmentSTRIDE-LM
CCC-03Quality TestingSTRIDE-LM
CCC-04Unauthorized Software InstallationsSTRIDE-LM
CCC-05Production ChangesSTRIDE-LM
DSI-01ClassificationSTRIDE-LM
DSI-02Data Inventory / FlowsSTRIDE-LM
DSI-03Ecommerce TransactionsSTRIDE-LM
DSI-04Handling / Labeling / Security PolicySTRIDE-LM
DSI-05Non-Production DataSTRIDE-LM
DSI-06Ownership / StewardshipSTRIDE-LM
DSI-07Secure DisposalSTRIDE-LM
DCS-01Asset ManagementSTRIDE-LM
DCS-02Controlled Access PointsSTRIDE-LM
DCS-03Equipment IdentificationSTRIDE-LM
DCS-04Off-Site AuthorizationSTRIDE-LM
DCS-05Off-Site EquipmentSTRIDE-LM
DCS-06PolicySTRIDE-LM
DCS-07Secure Area AuthorizationSTRIDE-LM
DCS-08Unauthorized Persons EntrySTRIDE-LM
DCS-09User AccessSTRIDE-LM
EKM-01EntitlementSTRIDE-LM
EKM-02Key GenerationSTRIDE-LM
EKM-03Sensitive Data ProtectionSTRIDE-LM
EKM-04Storage and AccessSTRIDE-LM
GRM-01Baseline RequirementsSTRIDE-LM
GRM-02Data Focus Risk AssessmentsSTRIDE-LM
GRM-03Management OversightSTRIDE-LM
GRM-04Management ProgramSTRIDE-LM
GRM-05Management Support/InvolvementSTRIDE-LM
GRM-06PolicySTRIDE-LM
GRM-07Policy EnforcementSTRIDE-LM