ccm-v4.1.md

CSA Cloud Controls Matrix v4.1 — control IDs (no verbatim prose)

Source of truth (not embedded): CCM v4.1 artifact on cloudsecurityalliance.org. License posture: see licensing.md. This table cites control identifiers and paraphrased short titles; it does not reproduce CCM control text, CAIQ questions, or Implementation Guidelines prose.

id	paraphrased title	url
CCM:A&A-01	audit and assurance policy	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:BCR-01	business continuity planning	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:CCC-01	change control policy	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:CEK-01	cryptography and key management policy	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:CEK-03	key management system	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:CEK-04	encryption at rest for sensitive data	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:DSP-01	data security policy	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:DSP-07	data classification	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:DSP-17	data retention and disposal	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:IAM-01	identity and access management policy	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:IAM-02	strong password / authentication policy	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:IAM-06	privileged access management	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:IAM-07	least privilege principle	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:IAM-10	multifactor authentication	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:IVS-03	network segmentation	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:LOG-01	logging and monitoring policy	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:LOG-02	audit log protection	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:LOG-04	audit log review	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:SEF-02	security incident response plan	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:STA-07	supply chain integrity	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:TVM-02	vulnerability remediation	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1
CCM:UEM-01	endpoint management policy	https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4-1