What Is the CSA Cloud Controls Matrix (CCM v4)? 17 Domains and 197 Controls

Domain Themes (17)

Domain themes span audit & assurance, application security, business continuity, change control, cryptography, datacenter security, data security & privacy, governance, human resources, identity & access, infrastructure & virtualization, interoperability, logging/monitoring, security incident management, supply chain, threat management, and related cloud-control families as published in CCM v4. Use the official domain list for exact titles and IDs.

How Providers Use CCM

• Self-assessment via CAIQ v4
• Mapping to ISO 27001 / SOC 2 evidence
• Customer security questionnaire responses
• STAR Level 2 certification scoping

Shared Responsibility

CCM control ownership still follows the cloud shared-responsibility model — see AWS / Azure / GCP / OCI.

How CyberSilo Helps

• Map CCM controls in CyberSilo CSA (Compliance Standards Automation)
• Monitoring evidence with ThreatHawk SIEM
• Advisory for STAR readiness — contact CyberSilo

Frequently Asked Questions

How many domains does CCM v4 have?

Seventeen domains.

How many controls does CCM v4 have?

One hundred ninety-seven controls — confirm against the current CSA CCM v4 publication used in your assessment.

Is CCM the same as CyberSilo CSA?

No. CCM is the Cloud Security Alliance matrix. CyberSilo CSA is our Compliance Standards Automation product.

Related CSA CCM / STAR Resources

Hub · vs SOC 2 · CyberSilo CSA