Cloud Controls Matrix v4.0

The Cloud Controls Matrix is a set of controls designed to be used by both cloud service consumers as well as providers. The CCM includes both technical and administrative controls that can be used to provide security for cloud technology adoption or implementations.

Cloud Controls Matrix v4.0
IDNameThreats
A&A-01Audit and Assurance Policy and ProceduresSTRIDE-LM
A&A-05Audit Management ProcessSTRIDE-LM
IAM-12Safeguard Logs IntegritySTRIDE-LM
IAM-13Uniquely Identifiable UsersSTRIDE-LM
LOG-01Logging and Monitoring Policy and ProceduresSTRIDE-LM
LOG-02Audit Logs ProtectionSTRIDE-LM
LOG-03Security Monitoring and AlertingSTRIDE-LM
LOG-04Audit Logs Access and AccountabilitySTRIDE-LM
LOG-05Audit Logs Monitoring and ResponseSTRIDE-LM
LOG-06Clock SynchronizationSTRIDE-LM
LOG-07Logging ScopeSTRIDE-LM
LOG-08Log RecordsSTRIDE-LM
LOG-09Log ProtectionSTRIDE-LM
LOG-11Transaction/Activity LoggingSTRIDE-LM
LOG-12Access Control LogsSTRIDE-LM