Cloud Controls Matrix v3.0.1
The Cloud Controls Matrix is a set of controls designed to be used by both cloud service consumers as well as providers. The CCM includes both technical and administrative controls that can be used to provide security for cloud technology adoption or implementations.
| ID | Name | Threats |
|---|---|---|
| AIS-01 | Application Security | STRIDE-LM |
| DSI-01 | Classification | STRIDE-LM |
| DSI-02 | Data Inventory / Flows | STRIDE-LM |
| DSI-03 | Ecommerce Transactions | STRIDE-LM |
| DSI-04 | Handling / Labeling / Security Policy | STRIDE-LM |
| DSI-05 | Non-Production Data | STRIDE-LM |
| DSI-07 | Secure Disposal | STRIDE-LM |
| DCS-07 | Secure Area Authorization | STRIDE-LM |
| DCS-09 | User Access | STRIDE-LM |
| EKM-01 | Entitlement | STRIDE-LM |
| EKM-03 | Sensitive Data Protection | STRIDE-LM |
| EKM-04 | Storage and Access | STRIDE-LM |
| GRM-02 | Data Focus Risk Assessments | STRIDE-LM |
| HRS-03 | Employment Agreements | STRIDE-LM |
| HRS-04 | Employment Termination | STRIDE-LM |
| HRS-05 | Mobile Device Management | STRIDE-LM |
| HRS-06 | Non-Disclosure Agreements | STRIDE-LM |
| HRS-09 | Training / Awareness | STRIDE-LM |
| IAM-06 | Source Code Access Restriction | STRIDE-LM |
| IAM-07 | Third Party Access | STRIDE-LM |
| IVS-05 | Vulnerability Management | STRIDE-LM |
| IVS-10 | VM Security - Data Protection | STRIDE-LM |
| IVS-12 | Wireless Security | STRIDE-LM |
| IPY-02 | Data Request | STRIDE-LM |
| MOS-05 | Awareness and Training | STRIDE-LM |
| MOS-11 | Encryption | STRIDE-LM |
| MOS-18 | Remote Wipe | STRIDE-LM |