Cloud Security Alliance Cloud Controls Matrix (CCM) v4.1
SEF - Security Incident Management, E-Discovery, & Cloud Forensics – Cloud Security Alliance Cloud Controls Matrix (CCM) v4.1

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.1 SEF-09: Incident Records Management

The organisation keeps security incident records in a protected repository and maintains it. It examines those records on a regular basis to spot recurring patterns, underlying causes and systemic weaknesses, and puts suitable corrective actions in place.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 27002:2022 · 1 control

  • 5.27 Learning from information security incidents

NIST SP 800-53 Rev 5 · 1 control

  • NIST800-IR-5 IR-5 Incident Monitoring

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in SEF - Security Incident Management, E-Discovery, & Cloud Forensics – Cloud Security Alliance Cloud Controls Matrix (CCM) v4.1

Query this from an agent

The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Cloud Security Alliance Cloud Controls Matrix (CCM) v4.1 controls