Publication Peer Review
CCMv4.1 to DORA Reverse Mapping
Open Until: 01/06/2026
This document is an addendum to the CCMv4.1 and presents a comprehensive mapping between the Cloud Controls Matrix (CCM) v4.1 and the Digital Operational Resilience Act (DORA), Regulation (EU) 2022/2554, applying the Cloud Security Alliance’s control mapping methodology to identify gaps and overlaps between these frameworks. The document aims to help CCM-aligned organizations meet DORA requirements.
Please read the Introduction tab of the document to understand how to perform the peer review.
The peer review period has concluded. Stay tuned for the release of the final document!