The Cloud Security Alliance Cloud Controls Matrix is designed to provide fundamental security principles to guide cloud vendors and to assist prospective cloud customers in assessing the overall security risk of a cloud provider. The CSA CCM provides a controls framework that gives detailed understanding of security concepts and principles that are aligned to the Cloud Security Alliance guidance in 13 domains. The foundations of the Cloud Security Alliance Controls Matrix rest on its customized relationship to other industry-accepted security standards, regulations, and controls frameworks such as the ISO 27001/27002, ISACA COBIT, PCI, NIST, Jericho Forum and NERC CIP and will augment or provide internal control direction for service organization control reports attestations provided by cloud providers.
Cloud Controls Matrix
Tags:
Cloud Computing
Related Stories
Cloud accounts inadvertently exposed company data
Cybersecurity firm Adversis found more than 90 companies have inadvertently leaked corporate and customer data via files in their Box enterprise storage accounts, TechCrunch reports. Adversis found the cloud-based content-management and file-sharing service made secret links discoverable to others. ...
Microsoft previews cloud service privacy compliance tool
Microsoft has added a new tool, available to its cloud services subscription members, for implementing internal controls aimed at streamlining data protection compliance efforts, MediaPost reports. Tina Ying announced the new tool in a company blog post, revealing that the service is currently being...
New app from Cloud Insurance wants users to 'regain control of their digital footprints'
Sydney-based Cloud Insurance is developing Opt Out, an app that will put data access controls in on the spot, "automates data access permissions" and streamlines users' ability to "invoke de-identifications rights," The Australian Business Review reports. “We need to reassure the public that privacy...
US cloud services seeing major growth in Europe
The Wall Street Journal reports on the growth of U.S. cloud computing businesses in Europe, despite pressure on European companies to keep sensitive data within the continent. The U.S. growth stems from European companies moving cloud computing needs to outside providers, with American organizations...