Publication Peer Review
CCMv4.1 to DORA Reverse Mapping
Open Until: 01/06/2026
This document is an addendum to the CCMv4.1 and presents a comprehensive mapping between the Cloud Controls Matrix (CCM) v4.1 and the Digital Operational Resilience Act (DORA), Regulation (EU) 2022/2554, applying the Cloud Security Alliance’s control mapping methodology to identify gaps and overlaps between these frameworks. The document aims to help CCM-aligned organizations meet DORA requirements.
Please read the Introduction tab of the document to understand how to perform the peer review.
Contribute to Peer Review
Peer Review AgreementBy participating in this peer review, you acknowledge and agree to the following:
- Your name will be included as a reviewer only if you provide substantive feedback (e.g., content, clarity, accuracy). Feedback limited to grammar, syntax, or formatting will not qualify for acknowledgement.
- CSA's authors will have final descretion over which suggestions are incorporated into the document. Not all feedback will be implemented.
- You will not plagiarize or submit unmodified AI-generated text. If using AI-generated content, you must apply your expertise to refine, reformat, or integrate it meaningfully into the document.
Open Until: 01/06/2026