Cloud Controls Matrix v3.0.1
The Cloud Controls Matrix is a set of controls designed to be used by both cloud service consumers as well as providers. The CCM includes both technical and administrative controls that can be used to provide security for cloud technology adoption or implementations.
| ID | Name | Threats |
|---|---|---|
| AIS-01 | Application Security | STRIDE-LM |
| CCC-04 | Unauthorized Software Installations | STRIDE-LM |
| DCS-09 | User Access | STRIDE-LM |
| EKM-01 | Entitlement | STRIDE-LM |
| IAM-02 | Credential Lifecycle / Provision Management | STRIDE-LM |
| IAM-03 | Diagnostic / Configuration Ports Access | STRIDE-LM |
| IAM-05 | Segregation of Duties | STRIDE-LM |
| IAM-09 | User Access Authorization | STRIDE-LM |
| IAM-13 | Utility Programs Access | STRIDE-LM |
| IVS-05 | Vulnerability Management | STRIDE-LM |
| IVS-07 | OS Hardening and Base Controls | STRIDE-LM |
| IVS-11 | Hypervisor Hardening | STRIDE-LM |
| MOS-12 | Jailbreaking and Rooting | STRIDE-LM |
| MOS-15 | Operating Systems | STRIDE-LM |
| MOS-19 | Security Patches | STRIDE-LM |
| TVM-02 | Vulnerability / Patch Management | STRIDE-LM |