Download Publication
Informative Reference Details for the Mapping of CCM v4 to NIST CSF v2
Release Date: 10/08/2024
The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications, and best practices for securing cloud computing environments, is pleased to announce the publication of a new mapping of security controls between the CSA Cloud Controls Matrix (CCM) v4 and the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) v2.0. This mapping, now available in the NIST National Online Informative References (OLIR) Catalog, is a result of a joint collaboration between the CCM Working Group and NIST experts.
The NIST OLIR Program facilitates the development of standardized Online Informative References (OLIRs), which establish relationships between elements from cybersecurity, privacy, and other ICT domains. The newly published mapping aligns the CCM with the CSF, identifying equivalences (overlaps) between the control specifications of the two frameworks.
This alignment and publication allows cloud organizations to streamline compliance efforts, enhancing both their cloud security and compliance programs.
The NIST OLIR Program facilitates the development of standardized Online Informative References (OLIRs), which establish relationships between elements from cybersecurity, privacy, and other ICT domains. The newly published mapping aligns the CCM with the CSF, identifying equivalences (overlaps) between the control specifications of the two frameworks.
This alignment and publication allows cloud organizations to streamline compliance efforts, enhancing both their cloud security and compliance programs.
Download this Resource
Prefer to access this resource without an account? Download it now.
Share
Related resources
Related Resources
Interested in helping develop research with CSA?
Related Certificates & Training
.png){kind=logo}
Learn the core concepts, best practices and recommendation for securing an organization on the cloud regardless of the provider or platform. Covering all 14 domains from the CSA Security Guidance v4, recommendations from ENISA, and the Cloud Controls Matrix, you will come away understanding how to leverage information from CSA's vendor-neutral research to keep data secure on the cloud.
Learn more
Learn more