ChaptersCircleEventsBlog
Share how your organization manages AI securely. Take the CSA and Google enterprise AI Survey today!
Research Publications currently filtered by Topic, Locale.
×

CSA Research Publications

Whitepapers, Reports and Other Resources

Home
Publications

Browse Publications

NIST CSF v2 Cloud Community Profile - Based on CCM v4

NIST CSF v2 Cloud Community Profile - Based on CCM v4

Release Date: 10/15/2024

The CSFv2.0 Cloud Community Profile aligns the Cloud Controls Matrix (CCM) version 4.0 with the Cybersecurity Framework (CSF) version 2.0 by mapping equiv...

Request to download
Informative Reference Details for the Mapping of CCM v4 to NIST CSF v2

Informative Reference Details for the Mapping of CCM v4 to NIST CSF v2

Release Date: 10/08/2024

The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications, and best practices for securing cloud...

Request to download
CCM-Lite and CAIQ-Lite

CCM-Lite and CAIQ-Lite

Release Date: 06/04/2024

The Cloud Security Alliance, in collaboration with the CCM Working Group, proudly presents the CCM-Lite and CAIQ-Lite File Bundle. These tools offer a str...

Request to download
CCM v4.0 Implementation Guidelines

CCM v4.0 Implementation Guidelines

Release Date: 06/03/2024

This document will help you understand how to navigate through the Cloud Controls Matrix v4 to use it effectively and interpret and implement the CCM cont...

Request to download
Cloud Controls Matrix and CAIQ v4

Cloud Controls Matrix and CAIQ v4

Release Date: 06/03/2024

The Cloud Controls Matrix (CCM) is a cybersecurity control framework for cloud computing aligned to the CSA best practices, that is considered the de-facto s...

Request to download
CCM v4.0 Addendum - ECUC PP v2.1

CCM v4.0 Addendum - ECUC PP v2.1

Release Date: 02/12/2024

This document is an addendum to the 'ECUC Position Paper v2.1 (ECUC PP v2.1) that contains controls mapping between the CSA CCM v4.0 and the ECUC PPv2.1. ...

Request to download
STAR Program Overview

STAR Program Overview

Release Date: 08/31/2023

The CSA Security, Trust, Assurance, and Risk (STAR) program is the most complete and largest cloud assurance program in the world that constitutes an ecos...

Request to download
CCM and CAIQ FAQ

CCM and CAIQ FAQ

Release Date: 04/05/2023

The Cloud Controls Matrix (CCM) is a framework of controls (policies and procedures) that are essential for cloud computing security. It is created and up...

Request to download
CSA CCM v4.0 Addendum - IBM Cloud Framework for Financial Services v1.1.0

CSA CCM v4.0 Addendum - IBM Cloud Framework for Financial Services v1.1.0

Release Date: 02/22/2023

This document is a CSA CCM v4.0 addendum to the IBM Cloud Framework for Financial Services v1.1.0 that contains controls mapping between the CCM and the I...

Request to download
CSA CCM v4.0 Addendum - ISMAP

CSA CCM v4.0 Addendum - ISMAP

Release Date: 10/04/2022

This document is an addendum to the CCM V4.0 that contain controls mapping between the CSA CCM and Japan's Information System Security Management and Asse...

Request to download
CSA CCM v4.0 Addendum - CRI FS Profile v1.2

CSA CCM v4.0 Addendum - CRI FS Profile v1.2

Release Date: 07/15/2022

This document is a CSA CCM v4.0 addendum to the CRI FS Profile v1.2 that contains controls mapping between the CCM and the FS Profile. The document aims t...

Request to download
CCMv4.0 Auditing Guidelines

CCMv4.0 Auditing Guidelines

Release Date: 12/08/2021

This document contains auditing guidelines for each of the control specifications within the CCM version 4. The CCM is a detailed controls framework align...

Request to download
Enterprise Architecture to CCM v3.01 Reordered Mapping

Enterprise Architecture to CCM v3.01 Reordered Mapping

Release Date: 05/18/2021

The EA v2 to CCM v3.0.1 Mapping is a companion piece with the Enterprise Architecture Reference Guide v2. The peer review for both documents are intended to ...

Request to download
Cloud Security Initiative for the Financial Sector - Working Group Charter

Cloud Security Initiative for the Financial Sector - Working Group Charter

Release Date: 12/20/2020

CSA is partnering with the Cyber Risk Institute (CRI) to provide the financial community with new resources to map and integrate CSA’s Cloud Controls Matr...

Request to download
Enterprise Architecture to CCM Shared Responsibility Model

Enterprise Architecture to CCM Shared Responsibility Model

Release Date: 12/18/2020

The EA-CCM Shared Responsibility Model is a companion piece with the EA-CCM Mapping. To review the EA-CCM Mapping, follow this link. (https://cloudsecuritya...

Request to download
Enterprise Architecture to CCM v3.0.1 Mapping

Enterprise Architecture to CCM v3.0.1 Mapping

Release Date: 12/18/2020

The EA-CCM Mapping is a companion piece with the EA-CCM Shared Responsibility Model. To review the Shared Responsibility Model, follow this link. (http://cl...

Request to download
Gap Analysis Report - Mapping of the Association of Banks in Singapore Cloud Computing Implementation Guide 2.0 to Cloud Security Alliance Cloud Controls Matrix v3.0.1

Gap Analysis Report - Mapping of the Association of Banks in Singapore Cloud Computing Implementation Guide 2.0 to Cloud Security Alliance Cloud Controls Matrix v3.0.1

Release Date: 09/14/2020

The CCM Addendum (mapping with Association of Banks in Singapore Cloud Computing Implementation Guide 2.9) is a companion piece with the Gap Analysis Report....

Request to download
CCM Gap Analysis Report (ABS CCIG)

CCM Gap Analysis Report (ABS CCIG)

Release Date: 09/14/2020

The Gap Analysis Report is a companion piece with the CCM Addendum (mapping with Association of Banks in Singapore Cloud Computing Implementation Guide 2.9)....

Request to download
CCM Translation in 10 Languages

CCM Translation in 10 Languages

Release Date: 05/07/2020

Cloud Security Alliance (CSA) in the context of an agreement with OneTrust has translated the Cloud Control Matrix (CCM) v3.0.1 in 10 languages in order to f...

Request to download
CSA CCM v3.0.1 Addendum - Cloud OS Security Specifications

CSA CCM v3.0.1 Addendum - Cloud OS Security Specifications

Release Date: 01/29/2020

This document is an addendum to the CCM V3.0.1 and contains a controls mapping and gap analysis between the CSA CCM and CSA's research artifact "Cloud OS Sec...

Request to download