Cloud Controls Matrix v3.0.1

Version:

3.0.1

Publication Date:

March 8, 2019

Go to a searchable summary of Cloud Controls Matrix v3.0.1.

The Cloud Controls Matrix is a set of controls designed to be used by both cloud service consumers as well as providers. The CCM includes both technical and administrative controls that can be used to provide security for cloud technology adoption or implementations.

Control Families

AIS: Application & Interface Security

AAC: Audit Assurance & Compliance

BCR: Business Continuity Management & Operational Resilience

CCC: Change Control & Configuration Management

DSI: Data Security & Information Lifecycle Management

DCS: Datacenter Security

EKM: Encryption & Key Management

GRM: Governance and Risk Management

HRS: Human Resources

IAM: Identity & Access Management

IVS: Infrastructure & Virtualization Security

IPY: Interoperability & Portability

MOS: Mobile Security

SEF: Security Incident Management, E-Discovery, & Cloud Forensics

STA: Supply Chain Management, Transparency, and Accountability

TVM: Threat and Vulnerability Management