- CSA Cloud Controls Matrix (CCMv4) - Cloud Risk Management framework by CSA, mapped to trusted organizations&frameworks like ISO, ISACA, PCI. CSA's best product.
- Trick: ISACA has CISM, CSA has ISACA in CCM
Updates of CCSP vs CSA CCM
- Domain-Refresh-FAQ states,
August 2022
The changes will begin on August 1, 2022.
Yes. Beginning August 1, the CCSP exam will increase in length from 100 operational items with 25 pretest (unscored) items to 100 operational items with 50 pretest items. To allow for all items to be answered, the exam time will be increased from three to four hours.
The updated Official (ISC)² CCSP Training Course will be available on August 1, 2022.
CCSP Domain Changes Effective August 1, 2022
On August 1, 2022, (ISC)² will refresh the CCSP credential exam. These updates are the result of the Job Task Analysis (JTA), which is an analysis of the current content of the credential evaluated by (ISC)² members on a triennial cycle. The domain weights for the CCSP have changed as noted in the chart below:
Published: 13th October 2022
- (1), (2) - yield: August 1, 2022
- (3) - yields: 13th October 2022
SEATTLE – Dec. 8, 2021 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud computing environment, today released the Cloud Controls Matrix (CCM) Auditing Guidelines. Drafted by the CCM Working Group, this new addition to the Cloud Controls Matrix v4 contains a set of auditing guidelines tailored to the control specifications of each of the CCM’s 17 cloud security domains. This document provides auditors with a baseline understanding of the CCM audit areas, allowing them to better perform a CCM-related audit and assessment.
This is the latest known release, see also:
- https://www.youtube.com/watch?v=8UgOyjoMbDg
- https://community.isc2.org/t5/Cloud-Security/Cloud-Controls-Matrix-CCM-v4-Released/td-p/42755
So as of June 2023, CCM v4 is the latest version, and will likely stay so for a few years.
As such, there is no need to learn about "CCMv4" updates, compared to the previous versions.