CSA CCM and Kudo
How Kudo, through its ISMS, relates to CSA CCM: domain mapping, controls and compliance objectives explained step by step.
The Cloud Security Alliance Cloud Control Matrix (CSA CCM) v4 is a cybersecurity control framework designed specifically for cloud computing environments. Kudo maps its domains and controls to the framework and the ISMS policies.
CSA CCM v4 Structure
17 Domains
From governance and risk management to application security and incident management.
197 Controls
Distributed across the 17 control domains of the CCM framework.
CSA CCM v4 Domains
| Code | Domain | Controls |
|---|---|---|
| A&A | Audit and Assurance | 8 |
| AIS | Application and Interface Security | 6 |
| BCR | Business Continuity and Operational Resilience | 12 |
| CCC | Change Control and Configuration Management | 10 |
| CEK | Cryptography, Encryption, and Key Management | 21 |
| DCS | Datacenter Security | 12 |
| DSP | Data Security and Privacy Lifecycle Management | 23 |
| GRC | Governance, Risk, and Compliance | 7 |
| HRS | Human Resources Security | 13 |
| IAM | Identity and Access Management | 14 |
| IPY | Interoperability and Portability | 5 |
| IVS | Infrastructure and Virtualization Security | 10 |
| LOG | Logging and Monitoring | 13 |
| SEF | Security Incident Management, E-Discovery & Forensics | 9 |
| STA | Supply Chain Management, Transparency and Accountability | 10 |
| TVM | Threat and Vulnerability Management | 11 |
| UEM | Universal Endpoint Management | 13 |
| Total | 197 |