New Framework at CSET - CSA CCMv4 + CAIQ

[Flavio1980]

🧩 CSET Module Proposal

Wonder if is easy to import or if there is any roadmap to have CSA (Cloud Security Alliance) CCMv4 and its associated questionnaire (CAIQ) as an available framework for CSET assessments.

Motivation

Assessment of Cloud Environments

Example

The controls in CCM cover all key aspects of cloud technology and can be used to assess and guide the security of any cloud implementation

Pitch

Be a complete assessment tool. Several enterprises use CSA CCM instead of NIST framework on CSP assessment and on their own cloud infrastructure.

Document Links

https://cloudsecurityalliance.org/research/cloud-controls-matrix

[mckenziewillmore]

I'm going to move this over to our discussion board as an "Idea".