CCM

The CCM is the Cloud Security Alliance's framework of cloud security controls, organized into domains covering everything from identity management to incident response. It maps to major standards like ISO 27001 and NIST, so one assessment can satisfy many requirements. Organizations use it to evaluate cloud providers and to structure their own cloud security programs.