The Cloud Security Alliance (CSA) has released version 4 of its Cloud Controls Matrix (CCM), the cloud-specific control framework that underpins the CSA STAR programme.
Key points
- Adds more than 60 new cloud security controls.
- Introduces a new Logging and Monitoring domain.
- Updates coverage of topics such as supply chain management, container security and the shared responsibility model.
- An updated Consensus Assessments Initiative Questionnaire (CAIQ) supports self-assessment.
- Mappings to other standards are being updated.
Cloud providers using STAR self-assessments, certifications or attestations should plan their move to CCM v4. UK cloud customers can use the updated CAIQ to compare providers’ controls.
Source: Cloud Controls Matrix v4 (Cloud Security Alliance)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
