The Cloud Controls Matrix (CCM) is a cybersecurity control framework for cloud computing aligned to the CSA best practices, that is considered the de-facto standard for cloud security and privacy. The accompanying questionnaire, CAIQ, provides a set of “yes or no” questions based on the security controls in the CCM. You can now download the CCM and CAIQ together.
![Cloud Controls Matrix and CAIQ v4 | CSA](https://cdn-ak-scissors.b.st-hatena.com/image/square/16ec68440b5fb5169198294c874e4fa7da7ecc25/height=288;version=1;width=512/https%3A%2F%2Fcloudsecurityalliance.org%2Frails%2Factive_storage%2Fblobs%2Fredirect%2FeyJfcmFpbHMiOnsiZGF0YSI6NDczMiwicHVyIjoiYmxvYl9pZCJ9fQ%3D%3D--d72eb1b4a99cea61ae0a79bb98befa3efedad07b%2FCCM-thumbnail-2021.png)