The Implementation Guidelines for the Cloud Controls Matrix v4

The Cloud Security Alliance has published the Implementation Guidelines for the Cloud Controls Matrix version 4. The CCMv4 Implementation Guidelines are tailored to the security and privacy control specifications of the 17 cloud security domains of the CCM, with their main goal being to provide “how-to” guidance and recommendations in support of their proper implementation. Given a certain CCM control specification, the document explains what should be done to effectively implement and monitor a CCM control in alignment with the Shared Security Responsibility Model (SSRM), which specific best practices should be followed, what the specific regulations of reference are, and what the differences are when implementing a control from the SaaS-PaaS-IaaS perspective. The CCM Implementation guidelines are a collaborative product from volunteering subject matter experts within the CCM Working Group, and it is based on shared CSPs and CSCs experiences in implementing and securing cloud services when leveraging the CCM controls. Speakers: Vani Murthy, Senior Information Security and Compliance Advisor, Akamai Technologies at Cambridge Ashish Vashishtha, Cybersecurity Manager and Security Architect, IBM Erik Johnson, Senior Enterprise Cloud Security Specialist, USA, Federal Reserve Information Technology