CCM and CAIQ FAQ
Release Date: 04/05/2023
Working Group: Cloud Controls Matrix Working Group
The Cloud Controls Matrix (CCM) is a framework of controls (policies and procedures) that are essential for cloud computing security. It is created and updated by CSA and aligned to CSA best practices. The controls in CCM cover all key aspects of cloud technology and can be used to assess and guide the security of any cloud implementation. CSA has arranged CCM’s controls in both spreadsheet and machine-readable versions of yes/no questions that are easy to read and use, known as the Consensus Assessment Initiative Questionnaire (CAIQ).
Learn more about what CCM and CAIQ are, why they’re important, and how to use them.
Download this Resource
Prefer to access this resource without an account? Download it now.