ChaptersCircleEventsBlog
Align cybersecurity controls with evolving regulations and make a real impact in the industry. Join CSA's Regulatory Analysis and Compliance Engineering Working Group!

Download Publication

CSA CCM v4.0 Addendum - CRI FS Profile v1.2
CSA CCM v4.0 Addendum - CRI FS Profile v1.2

CSA CCM v4.0 Addendum - CRI FS Profile v1.2

Release Date: 07/15/2022

Working Group: Consensus Assessments

This document is a CSA CCM v4.0 addendum to the CRI FS Profile v1.2 that contains controls mapping between the CCM and the FS Profile. The document aims to help FS Profile compliant organizations meet CCM requirements. This is achieved by identifying compliance gaps in FS Profile in relation to the CCM. This document contains the following information:

 • Controls Mapping 

 • Gap Identification (i.e. Partial, Full or No Gap)

 • Gap Analysis

 • Addendum

Download this Resource

Prefer to access this resource without an account? Download it now.

Bookmark
Share
Related resources
Requirements for Bodies Providing STAR Certification
Requirements for Bodies Providing STAR Certific...
NIST CSF v2 Cloud Community Profile - Based on CCM v4
NIST CSF v2 Cloud Community Profile - Based on ...
Informative Reference Details for the Mapping of CCM v4 to NIST CSF v2
Informative Reference Details for the Mapping o...
Why Do I Have to Fill Out a CAIQ Before Pursuing STAR Level 2 Certification?
Why Do I Have to Fill Out a CAIQ Before Pursuing STAR Level 2 Certi...
Published: 06/17/2025
Implementing CCM: Interoperability & Portability Controls
Implementing CCM: Interoperability & Portability Controls
Published: 06/13/2025
The AI Trust Imperative: Why the CSA AI Trustworthy Pledge Matters Now More Than Ever
The AI Trust Imperative: Why the CSA AI Trustworthy Pledge Matters ...
Published: 06/12/2025
Valid-AI-ted: A Major Step Towards Real-Time Cloud Assurance
Valid-AI-ted: A Major Step Towards Real-Time Cloud Assurance
Published: 06/11/2025

Acknowledgements

Johan Olivier
Johan Olivier
Security and Compliance Director

Johan Olivier

Security and Compliance Director

I am a Security and Compliance Director at QorusDocs where I am responsible for the company-wide information security posture and SOC 2 Type 2 compliance.

My career in the compliance space is backed by 20 years’ experience as a Software Solutions Architect and 2.5 years in an executive leadership position as SVP of Engineering.

Having worked in seven countries across four continents I have developed a special interest in behav...

Read more

Debjyoti Mukherjee
Debjyoti Mukherjee
Associate Director for RBC

Debjyoti Mukherjee

Associate Director for RBC

My cross-functional experience of over 15 years has been associated with Technology Risk Management including Cloud Governance, Cloud Security, Risk and Compliance, Information Security, Business Continuity, and Third-Party Risk Management at the off shore/ on shore locations of the Banking Industry of Canadian, foreign banks and Consulting firms.

Read more

Michael Roza
Michael Roza
Risk, Audit, Control and Compliance Professional at EVC

Michael Roza

Risk, Audit, Control and Compliance Professional at EVC

Since 2012, Michael Roza has been a pivotal member of the Cloud Security Alliance (CSA) family. He has contributed to over 140 projects, as a Lead Author or Author/Contributor and many more as a Reviewer/Editor.

Michael's extensive contributions encompass critical areas including Artificial Intelligence, Zero Trust/Software Defined Perimeter, Internet of Things, Top Threats, Cloud Control Matrix, DevSecOps, and Key Management. His lea...

Read more

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training