Research Topic
CAIQ
Cloud Controls Matrix and CAIQ v4
CAIQEnterprise ArchitectureConsensus AssessmentsCCAKCloud Component SpecificationsCloud Controls MatrixSecurity Guidance
Discuss this topic in Circle
View discussion community
Participate
| Press Mention | Source | Date |
|---|---|---|
| Startups’ Guide to Security Questionnaires | Security Boulevard | July 21, 2023 |
| CISOs Beware of The Rising Risk of Supply Chain Attacks | Spiceworks | November 22, 2023 |
| How to manage third-party risk in the cloud | Search Security | March 19, 2024 |
Cloud Security Research for Vendor Assessments
CSA Research crowd-sources the knowledge and expertise of security experts and helps address the challenges and needs they’ve experienced, or seen others experience, within the cybersecurity field. Each publication is vendor-neutral and follows the peer review process outlined in the CSA Research Lifecycle. We recommend getting started by reading the following documents.
Cloud Controls Matrix and CAIQ v4
The Consensus Assessments Initiative Questionnaire (CAIQ) provides a set of “yes or no” questions based on the security controls in the CCM that a cloud consumer or auditor may wish to ask a cloud provider. You can now download version 4 for the CCM and CAIQ together.
CAIQ-Lite
CSA and Whistic identified the need for a lighter-weight assessment questionnaire in order to accommodate the shift to cloud procurement models, and to enable cybersecurity professionals to more easily engage with cloud vendors. CAIQ-Lite was developed to meet the demands of an increasingly fast-paced cybersecurity environment where adoption is becoming paramount when selecting a vendor security questionnaire. CAIQ-Lite contains 71 questions compared to the 295 found in the CAIQ, while maintaining representation of 100% of the original 16 control domains present in the Cloud Controls Matrix (CCM) 3.0.1.
Webinars
