Cloud Controls Matrix (CCM)
GPTKB entity
Properties (54)
| Predicate | Object |
|---|---|
| gptkbp:instanceOf |
Framework
|
| gptkbp:associated_with |
gptkb:NIST_SP_800-53
ISO 27001 PCI DSS |
| gptkbp:bornIn |
Organizations for cloud governance
|
| gptkbp:composedOf |
17 domains
|
| gptkbp:contains |
Security controls
|
| gptkbp:developedBy |
gptkb:Cloud_Security_Alliance
|
| gptkbp:facilitates |
Third-party assessments
|
| gptkbp:focusesOn |
Cloud security compliance
|
| gptkbp:hasVersion |
Latest version is 4.0
|
| https://www.w3.org/2000/01/rdf-schema#label |
Cloud Controls Matrix (CCM)
|
| gptkbp:includes |
Domain-specific controls
|
| gptkbp:provides |
Control objectives
|
| gptkbp:providesGuidanceOn |
Supply chain management
Audit management Change management Compliance management Data security Penetration testing Vulnerability assessment Configuration management Incident response planning Logging and monitoring Network security Security policy management Mobile security User training and awareness Data classification Data loss prevention Physical security Business continuity management Security architecture Application security Endpoint security Security awareness training Access control management Incident recovery Security incident management Infrastructure security Data center security Incident detection Privacy management Governance, risk, and compliance Security metrics and reporting Cloud security architecture Cloud service provider management Encryption management Threat and vulnerability management Identity_and_access_management |
| gptkbp:purpose |
Assess cloud security controls
|
| gptkbp:renovated |
gptkb:Cloud_Security_Alliance
|
| gptkbp:supports |
Risk management
|
| gptkbp:usedBy |
Cloud service providers
|