Download Publication

CCM and CAIQ FAQ
Release Date: 04/05/2023
Working Group: Cloud Controls Matrix Working Group
The Cloud Controls Matrix (CCM) is a framework of controls (policies and procedures) that are essential for cloud computing security. It is created and updated by CSA and aligned to CSA best practices. The controls in CCM cover all key aspects of cloud technology and can be used to assess and guide the security of any cloud implementation. CSA has arranged CCM’s controls in a spreadsheet of yes/no questions that is easy to read and use, known as the Consensus Assessment Initiative Questionnaire (CAIQ).
Learn more about what CCM and CAIQ are, why they’re important, and how to use them.
Download this Resource
Prefer to access this resource without an account? Download it now.
Related Resources
Are you a research volunteer? Request to have your profile displayed on the website here.