Register for CSA’s SECtember conference and trainings today




Circle
Events
Blog

CSA Research Publications

Whitepapers, Reports and Other Resources

Home
Publications

Browse Publications

CSA CCM v4.0 Addendum - CRI FS Profile v1.2

CSA CCM v4.0 Addendum - CRI FS Profile v1.2
Release Date: 07/15/2022

This document is a CSA CCM v4.0 addendum to the CRI FS Profile v1.2 that contains controls mapping between the CCM and the FS Profile. The document aims t...

Request to download
CCM v4 - Indonesian Translation

CCM v4 - Indonesian Translation
Release Date: 03/14/2022

Terjemahan dari publikasi ini ke dalam bahasa Indonesia di lakukan olehChapter dan dukungan sukarelawan, tetapi konten yang di terjemahkan beradadi luar C...

Request to download
CCMv4.0 Auditing Guidelines

CCMv4.0 Auditing Guidelines
Release Date: 12/08/2021

This document contains auditing guidelines for each of the control specifications within the CCM version 4. The CCM is a detailed controls framework align...

Request to download
STAR Level 1: Security Questionnaire (CAIQ v4) - Japanese Translation

STAR Level 1: Security Questionnaire (CAIQ v4) - Japanese Translation
Release Date: 11/02/2021

This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate...

Request to download
CCM v4 - Turkish Translation

CCM v4 - Turkish Translation
Release Date: 10/26/2021

Bu yayının bu yerel dile çevrilmiş versiyonu, bölümlerin ve gönüllülerin çabalarıyla [orijinal kaynak](https://cloudsecurityalliance.org/artifacts/cloud-c...

Request to download
CCM and CAIQ v4 -Japanese Translations

CCM and CAIQ v4 -Japanese Translations
Release Date: 10/26/2021

This localized version of this publication was produced from the original source material (CCM, CAIQ) through the efforts of chapters and volunteers but t...

Request to download
CCM v4 - Spanish Translation

CCM v4 - Spanish Translation
Release Date: 10/26/2021

Esta versión traducida de esta publicación se produjo a partir de la fuente original del material gracias al esfuerzo de los capítulos y voluntarios, pero...

Request to download
CCM v4 - Chinese Translation

CCM v4 - Chinese Translation
Release Date: 10/26/2021

该中文版本的出版物是根据[原文](https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4/)进行汉化,由CSA大中华区及其志愿者翻译完成,但翻译的内容不属于[CSA研究院生命周期](https://cloudsecuritya...

Request to download
CCM v4 - Hungarian Translation

CCM v4 - Hungarian Translation
Release Date: 10/19/2021

A kiadvány e honosított változata az eredeti forrásanyagból készült, helyi szervezetek és önkéntesek erőfeszítései révén, de a lefordított tartalom kívül ...

Request to download
CCM v4.0 Implementation Guidelines

CCM v4.0 Implementation Guidelines
Release Date: 09/13/2021

This document will help you understand how to navigate through the Cloud Controls Matrix v4 to use it effectively and interpret and implement the CCM cont...

Request to download
Cloud Controls Matrix and CAIQ v4

Cloud Controls Matrix and CAIQ v4
Release Date: 06/07/2021

The Cloud Controls Matrix (CCM) is a cybersecurity control framework for cloud computing aligned to the CSA best practices, that is considered the de-facto s...

Request to download
Enterprise Architecture to CCM v3.01 Reordered Mapping

Enterprise Architecture to CCM v3.01 Reordered Mapping
Release Date: 05/18/2021

The EA v2 to CCM v3.0.1 Mapping is a companion piece with the Enterprise Architecture Reference Guide v2. The peer review for both documents are intended to ...

Request to download
Cloud Security Initiative for the Financial Sector - Working Group Charter

Cloud Security Initiative for the Financial Sector - Working Group Charter
Release Date: 12/20/2020

CSA is partnering with the Cyber Risk Institute (CRI) to provide the financial community with new resources to map and integrate CSA’s Cloud Controls Matr...

Request to download
Enterprise Architecture to CCM Shared Responsibility Model

Enterprise Architecture to CCM Shared Responsibility Model
Release Date: 12/18/2020

The EA-CCM Shared Responsibility Model is a companion piece with the EA-CCM Mapping. To review the EA-CCM Mapping, follow this link. (https://cloudsecuritya...

Request to download
Enterprise Architecture to CCM v3.0.1 Mapping

Enterprise Architecture to CCM v3.0.1 Mapping
Release Date: 12/18/2020

The EA-CCM Mapping is a companion piece with the EA-CCM Shared Responsibility Model. To review the Shared Responsibility Model, follow this link. (http://cl...

Request to download

Gap Analysis Report - Mapping of the Association of Banks in Singapore Cloud Computing Implementation Guide 2.0 to Cloud Security Alliance Cloud Controls Matrix v3.0.1
Release Date: 09/14/2020

The CCM Addendum (mapping with Association of Banks in Singapore Cloud Computing Implementation Guide 2.9) is a companion piece with the Gap Analysis Report....

Request to download
CCM Gap Analysis Report (ABS CCIG)

CCM Gap Analysis Report (ABS CCIG)
Release Date: 09/14/2020

The Gap Analysis Report is a companion piece with the CCM Addendum (mapping with Association of Banks in Singapore Cloud Computing Implementation Guide 2.9)....

Request to download
CCM Translation in 10 Languages

CCM Translation in 10 Languages
Release Date: 05/07/2020

Cloud Security Alliance (CSA) in the context of an agreement with OneTrust has translated the Cloud Control Matrix (CCM) v3.0.1 in 10 languages in order to f...

Request to download

CSA CCM v3.0.1 Addendum - Cloud OS Security Specifications
Release Date: 01/29/2020

This document is an addendum to the CCM V3.0.1 and contains a controls mapping and gap analysis between the CSA CCM and CSA's research artifact "Cloud OS Sec...

Request to download

Mapping of 'The Guidelines' Security Recommendations to CCM
Release Date: 09/05/2019

This document contains the additional controls that serves to bridge the gap between CCM V3.0.1 and the controls within 'Guideline on Effectively Managing Se...

Request to download