// Level 2 · Domains
CSA Cloud Controls Matrix v4
Cloud Security Alliance control framework: 17 domains and 197 controls for cloud-specific security.
7 controls
Application & Interface Security
AAI domain controls.
Browse controls
6 controls
Audit & Assurance
AUD domain controls.
Browse controls
11 controls
Business Continuity Mgmt & Op Resilience
BCR domain controls.
Browse controls
9 controls
Change Control & Configuration Management
CCC domain controls.
Browse controls
21 controls
Cryptography, Encryption & Key Management
CEK domain controls.
Browse controls
15 controls
Datacenter Security
DCS domain controls.
Browse controls
19 controls
Data Security & Privacy Lifecycle Management
DSP domain controls.
Browse controls
8 controls
Governance, Risk and Compliance
GRC domain controls.
Browse controls
13 controls
Human Resources
HRS domain controls.
Browse controls
16 controls
Identity & Access Management
IAM domain controls.
Browse controls
4 controls
Interoperability & Portability
IPY domain controls.
Browse controls
9 controls
Infrastructure & Virtualization Security
IVS domain controls.
Browse controls
13 controls
Logging and Monitoring
LOG domain controls.
Browse controls
8 controls
Security Incident Mgmt, E-Discovery, & Cloud Forensics
SEF domain controls.
Browse controls
14 controls
Supply Chain Mgmt, Transparency, and Accountability
STA domain controls.
Browse controls
10 controls
Threat & Vulnerability Management
TVM domain controls.
Browse controls
14 controls
Universal Endpoint Management
UEM domain controls.
Browse controls