CSA Cloud Controls Matrix (CCM)

Description

The Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) is a helpful tool that allows consumers and providers to think in terms of specific controls in the cloud being mapped to specific regulations and frameworks (e.g., NIST, HIPPA, FIPS ENISA). It provides a common set of expectations between provider and consumer. In the CCM excel spreadsheet there are 16 control domains, each represented by a different color, with multiple subcategories within them. Moving across the columns, the user can see the various frameworks and regulations to which an organization may need to conform. The user can map controls to specific frameworks.