C5 (Germany) C5-IDM-07: Access to cloud customer data

What else in your programme already covers this

This control maps to 34 controls across 20 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

AWS Well-Architected Security Pillar · 3 controls

SEC03-BP07 Analyze public and cross-account access
SEC03-BP09 Share resources securely with a third party
SEC08-BP04 Enforce access control

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 3 controls

CCM-DSP-17 Sensitive Data Protection
CCM-IAM-11 CSCs Approval for Agreed Privileged Access Roles
CCM-LOG-12 Access Control Logs

PCI DSS 4.0 · 3 controls

10.2.1.1 10.2.1.1 Logs capture individual user access to cardholder data
7.2.6 7.2.6 Query access to stored cardholder data restricted
7.3.1 7.3.1 Need-to-know access control system covers all components

SOC 2 · 3 controls

SOC2-C1.1 C1.1 Identifying and maintaining confidential information
SOC2-CC6.3 CC6.3 Role-based access, least privilege and segregation of duties
SOC2-P5.1 P5.1 Data subject access

CIS Controls v8 · 2 controls

CIS-3.14 Log Sensitive Data Access
CIS-3.3 Configure Data Access Control Lists

CMMC 2.0 · 2 controls

AC.L2-3.1.1 Authorized Access Control
AC.L2-3.1.3 Control CUI Flow

FedRAMP High · 2 controls

AC-3 Access Enforcement
AC-6 Least Privilege

FedRAMP Moderate · 2 controls

AC-3 Access Enforcement
AC-6 Least Privilege

ISO 27001:2022 · 2 controls

8.2 Privileged access rights
8.3 Information access restriction

ISO 27002:2022 · 2 controls

8.2 Privileged access rights
8.3 Information access restriction

APPI · 1 control

APPI-A26 Report of Leakage to the Commission and Notification to the Person

Australia My Health Records Act 2012 · 1 control

MYHR-ENF-1 Mandatory data breach notification

Azure Security Benchmark · 1 control

ASBv3-PA-8 Determine access process for cloud provider support

DORA · 1 control

DORA-Art.14 Communication

HIPAA Security Rule · 1 control

164.312(c)(1) Integrity (Standard)

ISO 27701:2019 · 1 control

8.5.3 Records of PII disclosure to third parties

NIST Cybersecurity Framework 2.0 · 1 control

NIST-CSF-PR.DS-01 The confidentiality, integrity, and availability of data-at-rest are protected

NIST SP 800-161 Rev 1 · 1 control

161R1-PM-21 Accounting of Disclosures

NIST SP 800-53 Rev 5 · 1 control

NIST800-AC-3 AC-3 Access Enforcement

NIST SP 800-66 Rev 2 · 1 control

164.312(c)(1) Integrity (Standard)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of C5 (Germany) have you already done?

C5 (Germany) C5-IDM-07 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of C5 (Germany) your existing evidence covers. Hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 and 95 of 121 C5 (Germany) controls already carry evidence.

If you hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.178.5% covered · 26 gaps If you hold NIST SP 800-53 Rev 572.7% covered · 33 gaps If you hold FedRAMP Moderate71.1% covered · 35 gaps If you hold ISO 27002:202267.8% covered · 39 gaps If you hold ISO 27001:202257% covered · 52 gaps If you hold NIST SP 800-171 Rev 350.4% covered · 60 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 pair alone.

See the released pairs, $299 each Browse the graph free