EDM Council CDMC - Cloud Data Management Capability Framework
The EDM Council Cloud Data Management Capabilities (CDMC) Framework, an industry framework for managing and protecting sensitive data in cloud and hybrid environments. Organised into 6 components (Governance and Accountability; Cataloguing and Classification; Accessibility and Usage; Protection and Privacy; Data Lifecycle; Data and Technical Architecture) implemented through 14 Key Controls and Automations covering data control compliance, ownership, authoritative sources, data sovereignty, cataloguing, classification, entitlements, consumption purpose, security controls, data protection impact assessments, retention, data quality, cost metrics and data lineage - with an emphasis on automated enforcement in the cloud.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (6)
CDMC Component 1: Governance and Accountability
| Code | Title |
|---|---|
| CDMC-KC1 | Data Control Compliance |
| CDMC-KC2 | Ownership Field |
| CDMC-KC3 | Authoritative Data Sources and Provisioning Points |
| CDMC-KC4 | Data Sovereignty and Cross-Border Movement |
CDMC Component 2: Cataloguing and Classification
| Code | Title |
|---|---|
| CDMC-KC5 | Cataloguing |
| CDMC-KC6 | Classification |
CDMC Component 3: Accessibility and Usage
| Code | Title |
|---|---|
| CDMC-KC7 | Entitlements and Access for Sensitive Data |
| CDMC-KC8 | Data Consumption Purpose |
CDMC Component 4: Protection and Privacy
| Code | Title |
|---|---|
| CDMC-KC10 | Data Protection Impact Assessments |
| CDMC-KC9 | Security Controls |
CDMC Component 5: Data Lifecycle
| Code | Title |
|---|---|
| CDMC-KC11 | Data Retention, Archiving and Purging |
| CDMC-KC12 | Data Quality Measurement |
CDMC Component 6: Data and Technical Architecture
| Code | Title |
|---|---|
| CDMC-KC13 | Cost Metrics |
| CDMC-KC14 | Data Lineage |
Your Compliance Coverage
If you comply with EDM Council CDMC - Cloud Data Management Capability Framework, you already cover:
Maps to 5 other frameworks
Frequently Asked Questions
What is EDM Council CDMC - Cloud Data Management Capability Framework?
EDM Council CDMC - Cloud Data Management Capability Framework is a compliance framework from International (EDM Council) with 6 domains and 14 controls. The EDM Council Cloud Data Management Capabilities (CDMC) Framework, an industry framework for managing and protecting sensitive data in cloud and hybrid environments. Organised into 6 components (Governance and Accountability; Cataloguing and Classification; Accessibility and Usage; Protection and Privacy; Data Lifecycle; Data and Technical Architecture) implemented through 14 Key Controls and Automations covering data control compliance, ownership, authoritative sources, data sovereignty, cataloguing, classification, entitlements, consumption purpose, security controls, data protection impact assessments, retention, data quality, cost metrics and data lineage - with an emphasis on automated enforcement in the cloud. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
How many controls does EDM Council CDMC - Cloud Data Management Capability Framework have?
EDM Council CDMC - Cloud Data Management Capability Framework has 14 controls organised across 6 domains. The largest domains are CDMC Component 1: Governance and Accountability (4 controls), CDMC Component 2: Cataloguing and Classification (2 controls), CDMC Component 3: Accessibility and Usage (2 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
What frameworks does EDM Council CDMC - Cloud Data Management Capability Framework map to?
EDM Council CDMC - Cloud Data Management Capability Framework maps to 5 other compliance frameworks. The top mapping partners are EDM Council DCAM - Data Management Capability Assessment Model (29% coverage), NIST Cybersecurity Framework 2.0 (29% coverage), GDPR (14% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I get started with EDM Council CDMC - Cloud Data Management Capability Framework compliance?
Start your EDM Council CDMC - Cloud Data Management Capability Framework compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about EDM Council CDMC - Cloud Data Management Capability Framework requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 14 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 718 frameworks.
Get Started Free →Free forever — no credit card required