Working Group

The Enterprise Architecture working group follows closely to the cloud security controls in the Cloud Controls Matrix (CCM) in order to correctly and appropriately map the EA domains that have been discovered to be of the utmost importance to enterprises in building out their their ability to identify critical components that are key to their cloud security architecture. These domains, when agreed upon to an adjacent CCM control domain, create a larger picture for easily implementing strategies which touch on key items such as Governance & Compliance, InfoSec Management, Threat and Vulnerability Management, and Data Protection. The mapping also offers the ability to see sections that would map for cloud service providers and end users based around building an audit. The working group has developed an interactive website to learn about and explore the cloud reference architecture with simplified definition results, as well as an interactive application that allows users to learn about the applicability of the reference architecture to their business scenario. https://ea.cloudsecurityalliance.org/