CSA Research Publications
Whitepapers, Reports and Other Resources
Browse Publications
 | Cloud Security Initiative for the Financial Sector - Working Group Charter Release Date: 12/20/2020 CSA is partnering with the Cyber Risk Institute (CRI) to provide the financial community with new resources to map and integrate CSA’s Cloud Controls Matr... Request to download |
 | Enterprise Architecture to CCM Shared Responsibility Model Release Date: 12/18/2020 The EA-CCM Shared Responsibility Model is a companion piece with the EA-CCM Mapping. To review the EA-CCM Mapping, follow this link. (https://cloudsecuritya... Request to download |
 | Enterprise Architecture to CCM v3.0.1 Mapping Release Date: 12/18/2020 The EA-CCM Mapping is a companion piece with the EA-CCM Shared Responsibility Model. To review the Shared Responsibility Model, follow this link. (http://cl... Request to download |
 | Release Date: 09/14/2020 The CCM Addendum (mapping with Association of Banks in Singapore Cloud Computing Implementation Guide 2.9) is a companion piece with the Gap Analysis Report.... Request to download |
 | CCM Gap Analysis Report (ABS CCIG) Release Date: 09/14/2020 The Gap Analysis Report is a companion piece with the CCM Addendum (mapping with Association of Banks in Singapore Cloud Computing Implementation Guide 2.9).... Request to download |
 | CCM Translation in 10 Languages Release Date: 05/07/2020 Cloud Security Alliance (CSA) in the context of an agreement with OneTrust has translated the Cloud Control Matrix (CCM) v3.0.1 in 10 languages in order to f... Request to download |
| CSA CCM v3.0.1 Addendum - Cloud OS Security Specifications Release Date: 01/29/2020 This document is an addendum to the CCM V3.0.1 and contains a controls mapping and gap analysis between the CSA CCM and CSA's research artifact "Cloud OS Sec... Request to download |
| Mapping of 'The Guidelines' Security Recommendations to CCM Release Date: 09/05/2019 This document contains the additional controls that serves to bridge the gap between CCM V3.0.1 and the controls within 'Guideline on Effectively Managing Se... Request to download |
 | Release Date: 09/05/2019 The report summarizes the mapping of CCM v3.0.1 to 'Guideline on Effectively Managing Security Services in the Cloud' and provides gap analysis on the result... Request to download |
 | Release Date: 08/03/2019 The CCM, the only meta-framework of cloud-specific security controls, mapped to leading standards, best practices and regulations. CCM provides organizations... Request to download |
| CCM v3.0.1 Addendum - FedRAMP Moderate Release Date: 08/03/2019 This document is an addendum to the CCM V3.0.1 that contain controls mapping between the CSA CCM and the FedRAMP R4 Moderate Baseline. The document aims to ... Request to download |
| CSA CCM v3.0.1 Addendum - NIST 800-53 Rev 4 Moderate Release Date: 08/03/2019 This document is an addendum to the CCM V3.0.1 that contain controls mapping between the CSA CCM and the NIST 800-53 R4 Moderate Baseline. The document aims ... Request to download |
| CSA CCM v3.0.1 Addendum - AICPA TSC 2017 Release Date: 08/03/2019 This document is an addendum to the CCM V3.0.1 that contain controls mapping between the CSA CCM and the AICPA TSC 2017. The document aims to help AICPA TSC ... Request to download |
 | Release Date: 08/03/2019 The CCM, the only meta-framework of cloud-specific security controls, mapped to leading standards, best practices and regulations. CCM provides organizations... Request to download |
| CCM Mapping Workpackage Template Release Date: 02/14/2019 This document is the companion document to the Methodology for the Mapping of the Cloud Controls Matrix (CCM). It is a CCM mapping workpackage template that ... Request to download |
| CCM v3.0.1 Addendum - BSI Germany C5 v1 Release Date: 01/18/2019 This document is an addendum to the Cloud Controls Matrix (CCM) V3.0.1 controls. It contains the additional controls that serves to bridge the gap between CC... Request to download |
| CCM v3.0.1 Addendum - ISO 27002 27017 27018 v1.1 Release Date: 01/18/2019 This document is an addendum to the Cloud Controls Matrix (CCM) V3.0.1 controls. It contains the additional controls that serves to bridge the gap between CC... Request to download |
 | Release Date: 07/09/2018 The Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) provides fundamental security principles to guide cloud vendors and cloud customers seeking to ... Request to download |
 | Release Date: 12/18/2014 Cloud computing is the future, and in many cases, the present of information technology. Always On SSL (AOSSL) is rapidly becoming an essential practice to h... Request to download |
 | Cloud Controls Matrix v3.0.1 Info Sheet Release Date: 07/29/2014 Find out how many controls are in the Cloud Controls Matrix v3-0-1 in this info sheet. Request to download |