Cloud Security Alliance Cloud Controls Matrix (CCM) v4.1
SEF - Security Incident Management, E-Discovery, & Cloud Forensics – Cloud Security Alliance Cloud Controls Matrix (CCM) v4.1

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.1 SEF-07: Incident Management and Response

The organisation sets up, operates and evaluates processes, procedures and technical measures that let it respond to security incidents quickly and effectively according to how each incident is categorised and how severe it is. Those processes and procedures are reviewed, refreshed and tested every year at minimum.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 27002:2022 · 1 control

  • 5.26 Response to information security incidents

NIST SP 800-53 Rev 5 · 1 control

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in SEF - Security Incident Management, E-Discovery, & Cloud Forensics – Cloud Security Alliance Cloud Controls Matrix (CCM) v4.1

Query this from an agent

The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Cloud Security Alliance Cloud Controls Matrix (CCM) v4.1 controls