Working Group
Cloud Controls Matrix
Along with releasing updated versions of the CCM and CAIQ, this working group provides addendums, control mappings and gap analysis between the CCM and other research releases, industry standards, and regulations to keep it continually up to date.
View Current Projects
Cloud Controls Matrix and CAIQ v4
Working Group Leadership
Daniele Catteddu
Chief Technology Officer, CSA
Daniele Catteddu is an information security and risk management practitioner, technologies expert and privacy evangelist with over 15 of experience. He worked in several senior roles both in the private and public sector. He is member of various national and international security expert groups and committees on cyber-security and privacy, keynote speaker at several conferences and author of numerous studies and papers on risk management, ...
Eleftherios Skoutaris
Program Manager / Research Analyst, CSA EMEA
Working Group Co-Chairs
Michael Roza
Risk, Audit, Control and Compliance Professional at EVC
Michael Roza is a seasoned risk, audit, control and compliance, and cybersecurity professional with over 20 years of experience across multinational enterprises and startups. As a Cloud Security Alliance (CSA) Research member for over 10 years, he has led and contributed to more than 140 CSA projects spanning Zero Trust, AI, IoT, Top Threats, DecSecOps, Cloud Key Management, Cloud Control Matrix, and many others.
He has co-chaired...
Akash Verma
Technical Program Manager, Continuous Assurance Engineering, Google
Akash Verma serves as the Technical Program Manager for Cybersecurity Continuous Assurance Engineering at Google, overseeing various security engineering programs within Google Cloud's continuous risk and compliance assurance endeavors.
Beyond his responsibilities at Google, Akash collaborates with industry experts to drive research and development initiatives aimed at advancing cybersecurity practices and standards, including, but no...
Siddharth Nandakishoran
Siddharth Nandakishoran serves as an FSI Assurance Specialist at Amazon Web Services (AWS), where he oversees the end-to-end customer audit journey of AWS, from initial due diligence to comprehensive audit execution. He specializes in helping financial services customers develop robust control assurance frameworks that align with regulatory requirements while leveraging AWS's cloud infrastructure.
With significant e...
Jon-Michael Brook
Jon-Michael C. Brook is a certified, 25-year practitioner of cybersecurity, cloud, and privacy. He is the principal contributor to certification sites for privacy and cloud security, and has published books on privacy. Jon-Michael received numerous awards and recognition during his time with Raytheon, Northrop Grumman, Symantec, and Starbucks. He holds patents and trade secrets in intrusion detection, GUI design, and semantic data redaction...
| Publications in Review | Open Until |
|---|---|
| Data Security within AI Environments | Aug 29, 2025 |
| AICM Auditing Guidelines | Sep 03, 2025 |
| A Practitioner’s Guide to Post-Quantum Cryptography | Sep 17, 2025 |
| Cloud Threat Modeling 2025 | Sep 19, 2025 |
Who can join?
Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.
What is the time commitment?
The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.
Virtual Meetings
Attend our next meeting. You can just listen in to decide if this group is a good for you or you can choose to actively participate. During these calls we discuss current projects, and well as share ideas for new projects. This is a good way to meet the other members of the group. You can view all research meetings here.
Aug
27
CCMv4 WG
Additional info:
- Follow up on the latest CCM WG activities in Circle.
- If having issues finding the CCM WG, please follow the step by step guide to Circle on-boarding here.
- WG call meetings are recorded and made available to the rest of the group. The purpose of the recordings and their use is for the writing of meetings minutes and members in "difficult" time zones only. Please visit the "Data Protection Notice" document, which includes the purposes of use, retention period of audio files, etc.
Eleftherios Skoutaris is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://zoom.us/j/245687063
Meeting ID: 245 687 063
Passcode: 621643
One tap mobile
+16699009128,,245687063# US (San Jose)
+16465588656,,245687063# US (New York)
Dial by your location
+1 669 900 9128 US (San Jose)
+1 646 558 8656 US (New York)
Meeting ID: 245 687 063
Find your local number: https://zoom.us/u/ac16Mhvmr3
Sep
10
CCMv4 WG
Additional info:
- Follow up on the latest CCM WG activities in Circle.
- If having issues finding the CCM WG, please follow the step by step guide to Circle on-boarding here.
- WG call meetings are recorded and made available to the rest of the group. The purpose of the recordings and their use is for the writing of meetings minutes and members in "difficult" time zones only. Please visit the "Data Protection Notice" document, which includes the purposes of use, retention period of audio files, etc.
Eleftherios Skoutaris is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://zoom.us/j/245687063
Meeting ID: 245 687 063
Passcode: 621643
One tap mobile
+16699009128,,245687063# US (San Jose)
+16465588656,,245687063# US (New York)
Dial by your location
+1 669 900 9128 US (San Jose)
+1 646 558 8656 US (New York)
Meeting ID: 245 687 063
Find your local number: https://zoom.us/u/ac16Mhvmr3
Sep
24
CCMv4 WG
Additional info:
- Follow up on the latest CCM WG activities in Circle.
- If having issues finding the CCM WG, please follow the step by step guide to Circle on-boarding here.
- WG call meetings are recorded and made available to the rest of the group. The purpose of the recordings and their use is for the writing of meetings minutes and members in "difficult" time zones only. Please visit the "Data Protection Notice" document, which includes the purposes of use, retention period of audio files, etc.
Eleftherios Skoutaris is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://zoom.us/j/245687063
Meeting ID: 245 687 063
Passcode: 621643
One tap mobile
+16699009128,,245687063# US (San Jose)
+16465588656,,245687063# US (New York)
Dial by your location
+1 669 900 9128 US (San Jose)
+1 646 558 8656 US (New York)
Meeting ID: 245 687 063
Find your local number: https://zoom.us/u/ac16Mhvmr3
Oct
8
CCMv4 WG
Additional info:
- Follow up on the latest CCM WG activities in Circle.
- If having issues finding the CCM WG, please follow the step by step guide to Circle on-boarding here.
- WG call meetings are recorded and made available to the rest of the group. The purpose of the recordings and their use is for the writing of meetings minutes and members in "difficult" time zones only. Please visit the "Data Protection Notice" document, which includes the purposes of use, retention period of audio files, etc.
Eleftherios Skoutaris is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://zoom.us/j/245687063
Meeting ID: 245 687 063
Passcode: 621643
One tap mobile
+16699009128,,245687063# US (San Jose)
+16465588656,,245687063# US (New York)
Dial by your location
+1 669 900 9128 US (San Jose)
+1 646 558 8656 US (New York)
Meeting ID: 245 687 063
Find your local number: https://zoom.us/u/ac16Mhvmr3
Oct
22
CCMv4 WG
Additional info:
- Follow up on the latest CCM WG activities in Circle.
- If having issues finding the CCM WG, please follow the step by step guide to Circle on-boarding here.
- WG call meetings are recorded and made available to the rest of the group. The purpose of the recordings and their use is for the writing of meetings minutes and members in "difficult" time zones only. Please visit the "Data Protection Notice" document, which includes the purposes of use, retention period of audio files, etc.
Eleftherios Skoutaris is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://zoom.us/j/245687063
Meeting ID: 245 687 063
Passcode: 621643
One tap mobile
+16699009128,,245687063# US (San Jose)
+16465588656,,245687063# US (New York)
Dial by your location
+1 669 900 9128 US (San Jose)
+1 646 558 8656 US (New York)
Meeting ID: 245 687 063
Find your local number: https://zoom.us/u/ac16Mhvmr3
Open Peer Reviews
Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.