EDM Council CDMC - Cloud Data Management Capability Framework
The EDM Council's best-practice framework for managing and controlling data, above all sensitive data, in single, multi and hybrid cloud: six components, fourteen capabilities and 37 assessable sub-capabilities covering business cases and ownership, authoritative sourcing, sovereignty and cross-border movement, cataloging and classification, entitlements and data ethics, encryption, obfuscation, data loss prevention and privacy, lifecycle and data quality, cost, resilience, backup, portability and lineage, plus 14 key controls with certification tests that cloud consumers and providers are certified against. Built from the complete v1.1.1 text.
EDM Council CDMC - Cloud Data Management Capability Framework is a compliance framework from International (industry framework, EDM Council) with 6 domains and 51 controls that map to 5 other frameworks. The largest domains are Component 1: Governance and Accountability – EDM Council CDMC - Cloud Data Management Capability Framework (12 controls), Component 6: Data and Technical Architecture – EDM Council CDMC - Cloud Data Management Capability Framework (9 controls), Component 4: Protection and Privacy – EDM Council CDMC - Cloud Data Management Capability Framework (8 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (6)
Component 1: Governance and Accountability – EDM Council CDMC - Cloud Data Management Capability Framework
| Code | Title |
|---|---|
| edm-council-cdmc-cloud-data-management-capability-framework::1.1.1 | 1.1.1 Cloud data management business cases are defined |
| edm-council-cdmc-cloud-data-management-capability-framework::1.1.2 | 1.1.2 Cloud data management business cases are syndicated and governed |
| edm-council-cdmc-cloud-data-management-capability-framework::1.2.1 | 1.2.1 Data owner role and responsibilities are defined |
| edm-council-cdmc-cloud-data-management-capability-framework::1.2.2 | 1.2.2 Data ownership is established in the cloud |
| edm-council-cdmc-cloud-data-management-capability-framework::1.3.1 | 1.3.1 Data sourcing is managed and authorized |
| edm-council-cdmc-cloud-data-management-capability-framework::1.3.2 | 1.3.2 Data consumption is governed and supported by automation |
| edm-council-cdmc-cloud-data-management-capability-framework::1.4.1 | 1.4.1 Sovereignty of data is tracked |
| edm-council-cdmc-cloud-data-management-capability-framework::1.4.2 | 1.4.2 Data sovereignty and cross-border data movement risks are managed |
| edm-council-cdmc-cloud-data-management-capability-framework::KC1 | Key Control 1: Data Control Compliance |
| edm-council-cdmc-cloud-data-management-capability-framework::KC2 | Key Control 2: Ownership Field |
| edm-council-cdmc-cloud-data-management-capability-framework::KC3 | Key Control 3: Authoritative Data Sources and Provisioning Points |
| edm-council-cdmc-cloud-data-management-capability-framework::KC4 | Key Control 4: Data Sovereignty and Cross-Border Movement |
Component 2: Cataloging and Classification – EDM Council CDMC - Cloud Data Management Capability Framework
| Code | Title |
|---|---|
| edm-council-cdmc-cloud-data-management-capability-framework::2.1.1 | 2.1.1 Data cataloging is defined |
| edm-council-cdmc-cloud-data-management-capability-framework::2.1.2 | 2.1.2 Metadata is discoverable, enriched, managed, and exposed in data catalogs |
| edm-council-cdmc-cloud-data-management-capability-framework::2.1.3 | 2.1.3 Data catalogs are interoperable across multi and hybrid cloud environments |
| edm-council-cdmc-cloud-data-management-capability-framework::2.2.1 | 2.2.1 Data classifications are defined |
| edm-council-cdmc-cloud-data-management-capability-framework::2.2.2 | 2.2.2 Data classifications are applied and used |
| edm-council-cdmc-cloud-data-management-capability-framework::KC5 | Key Control 5: Cataloging |
| edm-council-cdmc-cloud-data-management-capability-framework::KC6 | Key Control 6: Classification |
Component 3: Accessibility and Usage – EDM Council CDMC - Cloud Data Management Capability Framework
| Code | Title |
|---|---|
| edm-council-cdmc-cloud-data-management-capability-framework::3.1.1 | 3.1.1 Data entitlement rights and obligations are captured as metadata |
| edm-council-cdmc-cloud-data-management-capability-framework::3.1.2 | 3.1.2 Data entitlement rights are enforced |
| edm-council-cdmc-cloud-data-management-capability-framework::3.1.3 | 3.1.3 Access and entitlement tracking is automated |
| edm-council-cdmc-cloud-data-management-capability-framework::3.2.1 | 3.2.1 Data ethics organization structures are established |
| edm-council-cdmc-cloud-data-management-capability-framework::3.2.2 | 3.2.2 Data ethics processes are operational |
| edm-council-cdmc-cloud-data-management-capability-framework::KC7 | Key Control 7: Entitlements and Access for Sensitive Data |
| edm-council-cdmc-cloud-data-management-capability-framework::KC8 | Key Control 8: Data Consumption Purpose |
Component 4: Protection and Privacy – EDM Council CDMC - Cloud Data Management Capability Framework
| Code | Title |
|---|---|
| edm-council-cdmc-cloud-data-management-capability-framework::4.1.1 | 4.1.1 Encryption policies are defined and enforced |
| edm-council-cdmc-cloud-data-management-capability-framework::4.1.2 | 4.1.2 Implementation of data security controls is evidenced |
| edm-council-cdmc-cloud-data-management-capability-framework::4.1.3 | 4.1.3 Data obfuscation techniques are defined and applied |
| edm-council-cdmc-cloud-data-management-capability-framework::4.1.4 | 4.1.4 A Data Loss Prevention program is established |
| edm-council-cdmc-cloud-data-management-capability-framework::4.2.1 | 4.2.1 A Data Privacy framework is defined |
| edm-council-cdmc-cloud-data-management-capability-framework::4.2.2 | 4.2.2 The Data Privacy framework is operational |
| edm-council-cdmc-cloud-data-management-capability-framework::KC10 | Key Control 10: Data Protection Impact Assessments |
| edm-council-cdmc-cloud-data-management-capability-framework::KC9 | Key Control 9: Security Controls |
Component 5: Data Lifecycle – EDM Council CDMC - Cloud Data Management Capability Framework
| Code | Title |
|---|---|
| edm-council-cdmc-cloud-data-management-capability-framework::5.1.1 | 5.1.1 A data lifecycle management framework is defined |
| edm-council-cdmc-cloud-data-management-capability-framework::5.1.2 | 5.1.2 The data lifecycle is implemented and managed |
| edm-council-cdmc-cloud-data-management-capability-framework::5.2.1 | 5.2.1 Data quality rules are managed |
| edm-council-cdmc-cloud-data-management-capability-framework::5.2.2 | 5.2.2 Data quality is measured |
| edm-council-cdmc-cloud-data-management-capability-framework::5.2.3 | 5.2.3 Data Quality metrics are reported |
| edm-council-cdmc-cloud-data-management-capability-framework::5.2.4 | 5.2.4 Data Quality Issues are managed |
| edm-council-cdmc-cloud-data-management-capability-framework::KC11 | Key Control 11: Data Retention, Archiving and Purging |
| edm-council-cdmc-cloud-data-management-capability-framework::KC12 | Key Control 12: Data Quality Measurement |
Component 6: Data and Technical Architecture – EDM Council CDMC - Cloud Data Management Capability Framework
| Code | Title |
|---|---|
| edm-council-cdmc-cloud-data-management-capability-framework::6.1.1 | 6.1.1 Optimization of cloud use and cost efficiency is facilitated |
| edm-council-cdmc-cloud-data-management-capability-framework::6.1.2 | 6.1.2 Principles for data availability and resilience are established and applied |
| edm-council-cdmc-cloud-data-management-capability-framework::6.1.3 | 6.1.3 Backups and point-in-time recovery are supported |
| edm-council-cdmc-cloud-data-management-capability-framework::6.1.4 | 6.1.4 Portability and exit planning are established |
| edm-council-cdmc-cloud-data-management-capability-framework::6.2.1 | 6.2.1 Multi-environment lineage discovery is automated |
| edm-council-cdmc-cloud-data-management-capability-framework::6.2.2 | 6.2.2 Data lineage changes are tracked and managed |
| edm-council-cdmc-cloud-data-management-capability-framework::6.2.3 | 6.2.3 Data lineage reporting and visualization are implemented |
| edm-council-cdmc-cloud-data-management-capability-framework::KC13 | Key Control 13: Cost Metrics |
| edm-council-cdmc-cloud-data-management-capability-framework::KC14 | Key Control 14: Data Lineage |
Your Compliance Coverage
If you comply with EDM Council CDMC - Cloud Data Management Capability Framework, you already cover:
Maps to 5 other frameworks
Coverage is not the same as your position
This page shows what EDM Council CDMC - Cloud Data Management Capability Framework overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.
The Compliance Position Diagnostic, $5,000 fixed, ten business daysWhat is EDM Council CDMC - Cloud Data Management Capability Framework and who does it apply to?
EDM Council CDMC - Cloud Data Management Capability Framework is a compliance framework from International (industry framework, EDM Council) with 6 domains and 51 controls. The EDM Council's best-practice framework for managing and controlling data, above all sensitive data, in single, multi and hybrid cloud: six components, fourteen capabilities and 37 assessable sub-capabilities covering business cases and ownership, authoritative sourcing, sovereignty and cross-border movement, cataloging and classification, entitlements and data ethics, encryption, obfuscation, data loss prevention and privacy, lifecycle and data quality, cost, resilience, backup, portability and lineage, plus 14 key controls with certification tests that cloud consumers and providers are certified against. Built from the complete v1.1.1 text. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does EDM Council CDMC - Cloud Data Management Capability Framework actually require?
EDM Council CDMC - Cloud Data Management Capability Framework has 51 controls organised across 6 domains. The largest domains are Component 1: Governance and Accountability – EDM Council CDMC - Cloud Data Management Capability Framework (12 controls), Component 6: Data and Technical Architecture – EDM Council CDMC - Cloud Data Management Capability Framework (9 controls), Component 4: Protection and Privacy – EDM Council CDMC - Cloud Data Management Capability Framework (8 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of EDM Council CDMC - Cloud Data Management Capability Framework do I already cover?
EDM Council CDMC - Cloud Data Management Capability Framework maps to 5 other compliance frameworks. The top mapping partners are NIST Cybersecurity Framework 2.0 (6% coverage), EDM Council DCAM - Data Management Capability Assessment Model (6% coverage), GDPR (3% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement EDM Council CDMC - Cloud Data Management Capability Framework?
Start your EDM Council CDMC - Cloud Data Management Capability Framework compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about EDM Council CDMC - Cloud Data Management Capability Framework requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 51 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,121 frameworks.
Get Started Free →Free forever, no credit card required