Set of tools which can be used for developing a broad range of different architecture perspectives integrated usually as a common Architecture Framework.
Elements that the governance process must cover are:
Cloud Controls Matrix (CCM) Data
Physical | Network | Compute | App | Data |
---|---|---|---|---|
True | True | True | True | True |
Corp Gov Relevance |
---|
True |
SaaS | PaaS | IaaS |
---|---|---|
True | True | True |
Service Provider | Tenant / Consumer |
---|---|
True | False |
COBIT 4.1 | HIPAA / HITECH Act | ISO/IEC 27001-2005 |
---|---|---|
A12 | A.6.1.4 |
NIST SP800-53 R3 | FedRAMP (Final 2012) Low Impact | FedRAMP (Final 2012) Moderate Impact | PCI DSS v2.0 |
---|---|---|---|
CA-1 | NIST SP 800-53 R3 CA-1 | NIST SP 800-53 R3 CA-1 | 6.3.2 |
BITS Shared Assessments SIG v6.0 | BITS Shared Assessments SIG v5.0 | GAPP (Aug 2009) |
---|---|---|
I.1.1, I.1.2, I.2. 7.2, I.2.8, I.2.9, I.2.10, I.2.13, I.2.14, I.2.15, I.2.18, I.2.22.6, L.5 | I.2 | 1.2.6 |
Jericho Forum | NERC CIP |
---|---|
Commandment #1 |
Consensus Assessments Initiative Questionnaire (CAIQ) Data
COBIT | HIPAA | ISO27001 | SP800_53 |
---|---|---|---|
COBIT 4.1 A12, A 16.1 | A.6.1.4 | NIST SP800-53 R3 CA-1 |
FedRAMP | PCI_DSS | BITS | GAPP |
---|---|---|---|
PCI DSS v2.0 6.3.2 | AUP v5.0 I.2 SIG v6.0: I.1.1, I.1.2, I.2. 7.2, I.2.8, I.2.9, I.2.10, I.2.13, I.2.14, I.2.15, I.2.18, I.2.22.6, L.5, | GAPP Ref 1.2.6 |
SaaS | PaaS | IaaS |
---|---|---|
True | True | True |
SP | CUST |
---|---|
True | True |