Working Group
Cloud Controls Matrix
Along with releasing updated versions of the CCM and CAIQ, this working group provides addendums, control mappings and gap analysis between the CCM and other research releases, industry standards, and regulations to keep it continually up to date.
View Current Projects
Cloud Controls Matrix and CAIQ v4
Working Group Leadership
Daniele Catteddu
Chief Technology Officer, CSA
Daniele Catteddu is an information security and risk management practitioner, technologies expert and privacy evangelist with over 15 of experience. He worked in several senior roles both in the private and public sector. He is member of various national and international security expert groups and committees on cyber-security and privacy, keynote speaker at several conferences and author of numerous studies and papers on risk management, ...
Eleftherios Skoutaris
Program Manager / Research Analyst, CSA EMEA
Working Group Co-Chairs
David Nickles
AWS
David Nickles is a Global Audit Program Manager for FSI’s at Amazon Web Services (AWS). His work focuses on enabling financial services institutions to move their workloads to the cloud by providing sound guidance for building programs to ensure regulatory, governance, risk, compliance, audit, and security control requirements are met, align to industry best practices, and appropriate due diligence activity is completed. Prior to AWS, David...
Sean Cordero
Sean Cordero brings more than 15 years of information security and IT experience to his current role as director, information security at Optiv. Cordero provides executive level advisement for the company’s Fortune 50 clients. Cordero’s prior leadership roles included: President of Cloud Watchmen, CSO for EdFund, CSO for ECMC West, Director of Security and Compliance for Charlotte Russe.
Cordero is a thought-leader and serves as chair...
Jon-Michael Brook
Jon-Michael C. Brook is a certified, 25-year practitioner of cybersecurity, cloud, and privacy. He is the principal contributor to certification sites for privacy and cloud security, and has published books on privacy. Jon-Michael received numerous awards and recognition during his time with Raytheon, Northrop Grumman, Symantec, and Starbucks. He holds patents and trade secrets in intrusion detection, GUI design, and semantic data redaction...
| Publications in Review | Open Until |
|---|---|
| Zero Trust Privacy Assessment and Guidance | Dec 27, 2024 |
| Cybersecurity and the Data Lifecycle | Jan 05, 2025 |
| AI Controls Matrix | Jan 19, 2025 |
Who can join?
Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.
What is the time commitment?
The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.
Virtual Meetings
Attend our next meeting. You can just listen in to decide if this group is a good for you or you can choose to actively participate. During these calls we discuss current projects, and well as share ideas for new projects. This is a good way to meet the other members of the group. You can view all research meetings here.
Jan
15
CCMv4 WG
Additional info:
- Follow up on the latest CCM WG activities in Circle.
- If having issues finding the CCM WG, please follow the step by step guide to Circle on-boarding here.
- WG call meetings are recorded and made available to the rest of the group. The purpose of the recordings and their use is for the writing of meetings minutes and members in "difficult" time zones only. Please visit the "Data Protection Notice" document, which includes the purposes of use, retention period of audio files, etc.
Eleftherios Skoutaris is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://zoom.us/j/245687063
Meeting ID: 245 687 063
Passcode: 621643
One tap mobile
+16699009128,,245687063# US (San Jose)
+16465588656,,245687063# US (New York)
Dial by your location
+1 669 900 9128 US (San Jose)
+1 646 558 8656 US (New York)
Meeting ID: 245 687 063
Find your local number: https://zoom.us/u/ac16Mhvmr3
Jan
29
CCMv4 WG
Additional info:
- Follow up on the latest CCM WG activities in Circle.
- If having issues finding the CCM WG, please follow the step by step guide to Circle on-boarding here.
- WG call meetings are recorded and made available to the rest of the group. The purpose of the recordings and their use is for the writing of meetings minutes and members in "difficult" time zones only. Please visit the "Data Protection Notice" document, which includes the purposes of use, retention period of audio files, etc.
Eleftherios Skoutaris is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://zoom.us/j/245687063
Meeting ID: 245 687 063
Passcode: 621643
One tap mobile
+16699009128,,245687063# US (San Jose)
+16465588656,,245687063# US (New York)
Dial by your location
+1 669 900 9128 US (San Jose)
+1 646 558 8656 US (New York)
Meeting ID: 245 687 063
Find your local number: https://zoom.us/u/ac16Mhvmr3
Feb
12
CCMv4 WG
Additional info:
- Follow up on the latest CCM WG activities in Circle.
- If having issues finding the CCM WG, please follow the step by step guide to Circle on-boarding here.
- WG call meetings are recorded and made available to the rest of the group. The purpose of the recordings and their use is for the writing of meetings minutes and members in "difficult" time zones only. Please visit the "Data Protection Notice" document, which includes the purposes of use, retention period of audio files, etc.
Eleftherios Skoutaris is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://zoom.us/j/245687063
Meeting ID: 245 687 063
Passcode: 621643
One tap mobile
+16699009128,,245687063# US (San Jose)
+16465588656,,245687063# US (New York)
Dial by your location
+1 669 900 9128 US (San Jose)
+1 646 558 8656 US (New York)
Meeting ID: 245 687 063
Find your local number: https://zoom.us/u/ac16Mhvmr3
Open Peer Reviews
Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.