Cloud Controls Matrix v4.0

The Cloud Controls Matrix is a set of controls designed to be used by both cloud service consumers as well as providers. The CCM includes both technical and administrative controls that can be used to provide security for cloud technology adoption or implementations.

Cloud Controls Matrix v4.0
IDNameThreats
AIS-04Secure Application Design and DevelopmentSTRIDE-LM
AIS-06Automated Secure Application DeploymentSTRIDE-LM
BCR-08BackupSTRIDE-LM
CCC-03Change Management TechnologySTRIDE-LM
CCC-04Unauthorized Change ProtectionSTRIDE-LM
CCC-06Change Management BaselineSTRIDE-LM
CCC-07Detection of Baseline DeviationSTRIDE-LM
CCC-09Change RestorationSTRIDE-LM
DCS-04Secure Media Transportation Policy and ProceduresSTRIDE-LM
DCS-12Cabling SecuritySTRIDE-LM
DCS-14Secure UtilitiesSTRIDE-LM
DSP-10Sensitive Data TransferSTRIDE-LM
IAM-12Safeguard Logs IntegritySTRIDE-LM
IVS-04OS Hardening and Base ControlsSTRIDE-LM
LOG-02Audit Logs ProtectionSTRIDE-LM
LOG-04Audit Logs Access and AccountabilitySTRIDE-LM
LOG-09Log ProtectionSTRIDE-LM
STA-02SSRM Supply ChainSTRIDE-LM
STA-08Supply Chain Risk ManagementSTRIDE-LM