thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Intermediate

Cloud Controls Matrix (CCM)

Cloud Security Alliance cybersecurity control framework for cloud computing, mapped to major standards and regulations.

Definition

The CSA Cloud Controls Matrix organizes cloud-specific security control objectives into domains (17 in version 4), identifies whether each control is the provider's, customer's or a shared responsibility, and maps to standards such as ISO/IEC 27001, NIST SP 800-53 and PCI DSS. The Consensus Assessments Initiative Questionnaire (CAIQ) is its companion questionnaire, and both underpin the CSA STAR program.

Example

A SaaS provider completes the CAIQ and publishes it to the CSA STAR Registry so customers can review its controls.

Exam tip

CCM, CAIQ and STAR are CSA artifacts frequently tested on the CCSK and CCSP exams.

Related terms