EDM Council CDMC - Cloud Data Management Capability Framework
The EDM Council Cloud Data Management Capabilities (CDMC) Framework, an industry framework for managing and protecting sensitive data in cloud and hybrid environments. Organised into 6 components (Governance and Accountability; Cataloguing and Classification; Accessibility and Usage; Protection and Privacy; Data Lifecycle; Data and Technical Architecture) implemented through 14 Key Controls and Automations covering data control compliance, ownership, authoritative sources, data sovereignty, cataloguing, classification, entitlements, consumption purpose, security controls, data protection impact assessments, retention, data quality, cost metrics and data lineage - with an emphasis on automated enforcement in the cloud.
EDM Council CDMC - Cloud Data Management Capability Framework is a compliance framework from International (EDM Council) with 6 domains and 14 controls that map to 5 other frameworks. The largest domains are CDMC Component 1: Governance and Accountability (4 controls), CDMC Component 2: Cataloguing and Classification (2 controls), CDMC Component 3: Accessibility and Usage (2 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (6)
CDMC Component 1: Governance and Accountability
| Code | Title |
|---|---|
| CDMC-KC1 | Data Control Compliance |
| CDMC-KC2 | Ownership Field |
| CDMC-KC3 | Authoritative Data Sources and Provisioning Points |
| CDMC-KC4 | Data Sovereignty and Cross-Border Movement |
CDMC Component 2: Cataloguing and Classification
CDMC Component 3: Accessibility and Usage
CDMC Component 4: Protection and Privacy
CDMC Component 5: Data Lifecycle
Your Compliance Coverage
If you comply with EDM Council CDMC - Cloud Data Management Capability Framework, you already cover:
Maps to 5 other frameworks
Coverage is not the same as your position
This page shows what EDM Council CDMC - Cloud Data Management Capability Framework overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.
The Compliance Position Diagnostic, $5,000 fixed, ten business daysWhat is EDM Council CDMC - Cloud Data Management Capability Framework and who does it apply to?
EDM Council CDMC - Cloud Data Management Capability Framework is a compliance framework from International (EDM Council) with 6 domains and 14 controls. The EDM Council Cloud Data Management Capabilities (CDMC) Framework, an industry framework for managing and protecting sensitive data in cloud and hybrid environments. Organised into 6 components (Governance and Accountability; Cataloguing and Classification; Accessibility and Usage; Protection and Privacy; Data Lifecycle; Data and Technical Architecture) implemented through 14 Key Controls and Automations covering data control compliance, ownership, authoritative sources, data sovereignty, cataloguing, classification, entitlements, consumption purpose, security controls, data protection impact assessments, retention, data quality, cost metrics and data lineage - with an emphasis on automated enforcement in the cloud. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does EDM Council CDMC - Cloud Data Management Capability Framework actually require?
EDM Council CDMC - Cloud Data Management Capability Framework has 14 controls organised across 6 domains. The largest domains are CDMC Component 1: Governance and Accountability (4 controls), CDMC Component 2: Cataloguing and Classification (2 controls), CDMC Component 3: Accessibility and Usage (2 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of EDM Council CDMC - Cloud Data Management Capability Framework do I already cover?
EDM Council CDMC - Cloud Data Management Capability Framework maps to 5 other compliance frameworks. The top mapping partners are EDM Council DCAM - Data Management Capability Assessment Model (29% coverage), NIST Cybersecurity Framework 2.0 (29% coverage), GDPR (14% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement EDM Council CDMC - Cloud Data Management Capability Framework?
Start your EDM Council CDMC - Cloud Data Management Capability Framework compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about EDM Council CDMC - Cloud Data Management Capability Framework requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 14 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 686 frameworks.
Get Started Free →Free forever — no credit card required