Word Application - CAIQ Online For Free

The Cloud Controls Matrix (CCM) is a cybersecurity control framework for cloud computing aligned to the CSA best practices, that is considered the de-facto standard for cloud security and privacy. The accompanying questionnaire, CAIQ, provides a set of ?yes or no? questions based on the security controls in the CCM.

Unlike the CAIQ, the SIG is not focused just on cloud vendors but on a more broad scope of your vendors. The SIG has upwards of 1200 questions. Shared Assessments updates the SIG each year to reflect domestic and international regulations, standards and guidelines for a wide range of industries.

Sharing the data/CAIQ results is done through the CSA's online registry for security controls, the Security, Trust and Assurance Registry (STAR), using STARWatch, a software-as-a-service application developed by the CSA.

We use the Consensus Assessments Initiative Questionnaire Lite (CAIQ-Lite) from the Cloud Security Alliance as a baseline mechanism to express our security posture in real terms and to provide security control transparency.

CAIQ-Lite contains 71 questions compared to the 295 found in the CAIQ, while maintaining representation of 100% of the original 16 control domains present in the Cloud Controls Matrix (CCM) 3.0.

CAIQ-Lite is a shorter and condensed version of CAIQ that allows cloud customers to more easily engage with their service providers, with only 71 questions still addressing all 16 of the CCM's control domains.

CAIQ assesses the security of cloud providers, and aims to create common and accepted industry standards for documentation. This offers a way for organizations to understand and evaluate cloud providers, and their security posture, before entering a business agreement.