Policy-as-Code
Released: 10/07/2022
Updated: 11/17/2025
CSA’s Cloud Controls Matrix (CCM) and other frameworks provide a comprehensive approach
to identifying controls to meet security, risk, and compliance requirements. When it comes to
regulated industries, it is also important to provide implementation guidance that reflect risk and
compliance specific to the industry. IBM has been working with industry to define industry
controls framework based on standards and is also mapped to CCM. As important as adopting
and aligning to frameworks is, it’s important how an organization operationalizes their
frameworks. Policy-as-Code is a concept to putting these frameworks and implementations in
action and enables continuous security and compliance.
Learn about the way the IBM Cloud for Financial Services aligns to and implements frameworks
such as CSA CCM for the ecosystem in the cloud.
to identifying controls to meet security, risk, and compliance requirements. When it comes to
regulated industries, it is also important to provide implementation guidance that reflect risk and
compliance specific to the industry. IBM has been working with industry to define industry
controls framework based on standards and is also mapped to CCM. As important as adopting
and aligning to frameworks is, it’s important how an organization operationalizes their
frameworks. Policy-as-Code is a concept to putting these frameworks and implementations in
action and enables continuous security and compliance.
Learn about the way the IBM Cloud for Financial Services aligns to and implements frameworks
such as CSA CCM for the ecosystem in the cloud.
Prefer to access this resource without an account? Download it now.
