Download Publication
.png)
CCM Video Series: GRC - Governance, Risk Management, & Compliance
Release Date: 11/04/2024
In this presentation we introduce the*Governance, Risk Management, and Compliance (GRC) domain of CCM, which consists of eight control specifications. These controls are designed to help Cloud Service Providers (CSPs) and Cloud Service Customers (CSCs) ensure that their governance, enterprise risk management (ERM), information security management, and compliance programs effectively address cloud-related concerns.
CSPs and CSCs are typically responsible for implementing their own governance, risk, and compliance controls to manage their cloud-based products, services, assets, and processes. The development of a GRC program is unique to each organization, tailored to its specific operations and needs.
Implementing GRC controls enables cloud organizations to effectively direct and manage their resources by providing a structured framework for risk management, regulatory compliance, and aligning security practices with business objectives.
CSPs and CSCs are typically responsible for implementing their own governance, risk, and compliance controls to manage their cloud-based products, services, assets, and processes. The development of a GRC program is unique to each organization, tailored to its specific operations and needs.
Implementing GRC controls enables cloud organizations to effectively direct and manage their resources by providing a structured framework for risk management, regulatory compliance, and aligning security practices with business objectives.
Download this Resource
Are you a research volunteer? Request to have your profile displayed on the website here.
Related Certificates & Training

Learn the core concepts, best practices and recommendation for securing an organization on the cloud regardless of the provider or platform. Covering all 14 domains from the CSA Security Guidance v4, recommendations from ENISA, and the Cloud Controls Matrix, you will come away understanding how to leverage information from CSA's vendor-neutral research to keep data secure on the cloud.
Learn more
Learn more