What Is the CSA Cloud Controls Matrix (CCM v4)? 17 Domains and 197 Controls

The Cloud Security Alliance Cloud Controls Matrix (CCM) v4 is the control catalogue behind most CSA STAR conversations.

Related: CCM / STAR hub · STAR levels · CAIQ.

Counts that matter: CCM v4 is organised as 17 domains containing 197 controls (confirm against the current CSA publication if your assessor cites a revision). Naming: CyberSilo CSA means CyberSilo’s Compliance Standards Automation product. CSA CCM / CSA STAR refer to the Cloud Security Alliance Cloud Controls Matrix and Security Trust Assurance and Risk programme.

Domain Themes (17)

Domain themes span audit & assurance, application security, business continuity, change control, cryptography, datacenter security, data security & privacy, governance, human resources, identity & access, infrastructure & virtualization, interoperability, logging/monitoring, security incident management, supply chain, threat management, and related cloud-control families as published in CCM v4. Use the official domain list for exact titles and IDs.

How Providers Use CCM

Self-assessment via CAIQ v4
Mapping to ISO 27001 / SOC 2 evidence
Customer security questionnaire responses
STAR Level 2 certification scoping

Shared Responsibility

CCM control ownership still follows the cloud shared-responsibility model — see AWS / Azure / GCP / OCI.

How CyberSilo Helps

Map CCM controls in CyberSilo CSA (Compliance Standards Automation)
Monitoring evidence with ThreatHawk SIEM
Advisory for STAR readiness — contact CyberSilo

Track All 197 Controls with Owners

Load CCM v4 status into CyberSilo CSA and link monitoring proof from ThreatHawk.

Talk to CyberSilo CCM / STAR Hub

Frequently Asked Questions

How many domains does CCM v4 have?

Seventeen domains.

How many controls does CCM v4 have?

One hundred ninety-seven controls — confirm against the current CSA CCM v4 publication used in your assessment.

Is CCM the same as CyberSilo CSA?

No. CCM is the Cloud Security Alliance matrix. CyberSilo CSA is our Compliance Standards Automation product.

Hub · vs SOC 2 · CyberSilo CSA

What Is the CSA Cloud Controls Matrix (CCM v4)? 17 Domains and 197 Controls

Domain Themes (17)

How Providers Use CCM

Shared Responsibility