Resources

The Cloud Security Alliance

CSA is the home of the Cloud Controls Matrix and the Consensus Assessments Initiative Questionnaire, both of which are referenced in the Cloud Service Evaluation Handbook.  They also have a host of other tools, documents and materials that can help with the Security and Privacy aspects of your evaluations.

Sample Scored Framework

This spreadsheet is an .xlsx file containing both the comprehensive and simple scored frameworks from Chapter 2 of the book, along with the charts from pages 32 and 33.  You can have a look to see how easy it is to create your own scored evaluations.  Feel free to use it on your projects or create your own using this as a starting point!

Sample Security Controls Scoring Using CSA’s CCM v.3.0

This spreadsheet is an .xlsx file containing the Cloud Controls Matrix v3.0 from CSA mapped to the five CSEH Security Controls attributes described on pages 269-278.  It shows you how you can easily use the CCM, or controls from any security standard, to perform an evaluation.