Cloud Controls Matrix v3.0.1
IDNameThreats
GRM-08Policy Impact on Risk AssessmentsSTRIDE-LM
GRM-09Policy ReviewsSTRIDE-LM
GRM-10Risk AssessmentsSTRIDE-LM
GRM-11Risk Management FrameworkSTRIDE-LM
HRS-01Asset ReturnsSTRIDE-LM
HRS-02Background ScreeningSTRIDE-LM
HRS-03Employment AgreementsSTRIDE-LM
HRS-04Employment TerminationSTRIDE-LM
HRS-05Mobile Device ManagementSTRIDE-LM
HRS-06Non-Disclosure AgreementsSTRIDE-LM
HRS-07Roles / ResponsibilitiesSTRIDE-LM
HRS-08Technology Acceptable UseSTRIDE-LM
HRS-09Training / AwarenessSTRIDE-LM
HRS-10User ResponsibilitySTRIDE-LM
HRS-11WorkspaceSTRIDE-LM
IAM-01Audit Tools AccessSTRIDE-LM
IAM-02Credential Lifecycle / Provision ManagementSTRIDE-LM
IAM-03Diagnostic / Configuration Ports AccessSTRIDE-LM
IAM-04Policies and ProceduresSTRIDE-LM
IAM-05Segregation of DutiesSTRIDE-LM
IAM-06Source Code Access RestrictionSTRIDE-LM
IAM-07Third Party AccessSTRIDE-LM
IAM-08Trusted SourcesSTRIDE-LM
IAM-09User Access AuthorizationSTRIDE-LM
IAM-10User Access ReviewsSTRIDE-LM
IAM-11User Access RevocationSTRIDE-LM
IAM-12User ID CredentialsSTRIDE-LM
IAM-13Utility Programs AccessSTRIDE-LM
IVS-01Audit Logging / Intrusion DetectionSTRIDE-LM
IVS-02Change DetectionSTRIDE-LM
IVS-03Clock SynchronizationSTRIDE-LM
IVS-04Information System DocumentationSTRIDE-LM
IVS-05Vulnerability ManagementSTRIDE-LM
IVS-06Network SecuritySTRIDE-LM
IVS-07OS Hardening and Base ControlsSTRIDE-LM
IVS-08Production / Non-Production EnvironmentsSTRIDE-LM
IVS-09SegmentationSTRIDE-LM
IVS-10VM Security - Data ProtectionSTRIDE-LM
IVS-11Hypervisor HardeningSTRIDE-LM
IVS-12Wireless SecuritySTRIDE-LM
IVS-13Network ArchitectureSTRIDE-LM
IPY-01APIsSTRIDE-LM
IPY-02Data RequestSTRIDE-LM
IPY-03Policy & LegalSTRIDE-LM
IPY-04Standardized Network ProtocolsSTRIDE-LM
IPY-05VirtualizationSTRIDE-LM
MOS-01Anti-MalwareSTRIDE-LM
MOS-02Application StoresSTRIDE-LM
MOS-03Approved ApplicationsSTRIDE-LM
MOS-04Approved Software for BYODSTRIDE-LM