ABCDEFGHIJKLMNOPQRSTUVWXYZ
1
Description
2
This document is an addendum to the ISO/IEC 27001:2013 standard that contain controls mapping between the CSA CCMv4.0 and the ISO/IEC 27001:2013 and ISO/IEC 27002:2022. The document aims to help ISO/IEC 27001 compliant organizations meet CCMv4.0 requirements. This is achieved by identifying compliance gaps in ISO27001/02 in relation to the CCMv4.0. This document contains the following information:
• Controls Mapping
• Gap Identification (i.e. Partial, Full or No Gap)
• Gap Analysis
• Addendum (Compensating Control Requirement)

The document is structured as follows. The tab "ISO/IEC 27002:2022 Mapping" contains the mappings as well as associated information such as the gap analysis and compensating controls. In this tab, columns:
• A-D contain the CCMv4 domains and control specifications.
• E-G contain a currently published mapping between CCMv4 and ISOs.
• H contains the correspondences of 27002:2022 control IDs to ISO 27002:2013.
• I-J-K-L contain the final mapping and gap analysis results
• M-Q inputs from 1st and 2nd reviews

The "Terminology" tab provides a list of terms used in this document and their definitions.

The CSA and the CCM working group hope that organizations will find this document useful for their cloud security compliance programs.
The contents of this document could contain technical inaccuracies, typographical errors and out-of-date information.

Please join us and sign up for free in the CCM WG in CSA Circle community.

3
Acknowledgements
4
Contributors
5

Robin Basham
Michael Bayere
Geoff Bird
Hyunho Chang
Elastos Chimwanda
Angela Dogan
Phil Garrelhas
Mohin Gulzar
Alana James-Aikins
Joel John
Erik Johnson
Jason Lutz
Krishna Das Manghat
Claus Matzke
Deb Mukherjee
Johan Olivier
Tim Pasaribu
Gina Rodriguez
Alex Stezycki
6
CSA Staff
7
Daniele Catteddu
Lefteris Skoutaris
8
9
10
Change Log
11
DateVersionNotes
12
dd/mm/yyyy1Publication of first version of the CCMv4.0 addendum for ISO27001:2013 and ISO 27002:2022
13
14
15
© Copyright 2022, Cloud Security Alliance. All rights reserved
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100