Skip to main content

Cloud Security Alliance (CSA) Cloud Controls Matrix spreadsheet

This discussion focuses on mapping cloud security controls to existing frameworks or regulations.

You will need to create 1 new thread AND post AT LEAST 2 comments on other students' threads. Here's how to get started:

Download the Cloud Security Alliance (CSA) Cloud Controls Matrix spreadsheet. (A quick Internet search should give you the address of the most current version for download.) Under the "Scope Applicability" heading, select a category that is applicable to the organization for which you work. For example, if your organization handle personal medical data and uses the COBIT framework, you could choose either COBIT or HIPAA/HITECH. Once you select a category, choose  row from "Control Domain" (that no other student has already selected!) Then, create a new thread in this week's discussion with the title from column B (i.e. CCM V3.0 Control ID.) Discuss three (3) ways in which the control domain maps to your chosen scope, and specifically what your organization does to implement the stated control. State the type of your industry.

Note: Do not disclose the actual name of your organization, only the type of industry  e.g. Finance, Government e.tc

OUTLINE YOUR DISCUSSION CLEARLY WITH HEADINGS FROM THE QUESTION.


If you don't know which scope applies to your organization, just use the University of the Cumberlands (UC) as your organization. As a university, we are under the domain of FERPA, So, is you choose UC, you would need to choose a Control Domain and explain how it maps to FERPA, and how UC implements the controls. 


So, here's an example. Let's suppose I work for a large on-line retailer. We handle payment cards and are therefore under PCI DSS requirements. I'll select BCR-03 control ID (Business Continuity Planning.) So I would create a new thread in this week's discussion with the title "BCR-03." Then I'd explain what BCR-03 is, what it maps to in PCI DSS (4.1, 4.1.1, 9.1, 9.2), and then I'd explain what my organization does to comply with this control requirement. 


Once you create your new thread, you need to find AT LEAST 2 other threads from other students and comment on their threads. Make sure your comments are more than "I agree", or "Good post." Provide SUBSTANTIVE comments

Comments

Post a Comment

Popular posts from this blog

Identify and discuss a key milestone in the history of computers that interests you and why.

  Part 1Title: Lab ResponseDiscuss one feature of MS Word and one feature of MS Excel that you found challenging within the lab and why. Examples are WordArt, inserting shapes, adding borders, cell styles, etc. This response should be at least one paragraph in length. Part 2Title: History of Computers Identify and discuss a key milestone in the history of computers that interests you and why. This section should be at least one paragraph. Part 3Title: System Software vs. Application Software In your words, explain the difference between application software and system software as if to another coworker who has limited technical knowledge. Use examples to support your rationalization. This section should be at least two paragraphs. Part 4Title: Blockchain and Cryptocurrency In a minimum of one paragraph each: 1. Conduct some research on the internet and discuss one underlying technology of cryptocurrencies like blockchain, cryptography, distributed ledger technol...
Post a Comment
Read more

Cybersecurity and Infrastructure Security (CISA)

 Develop a research paper that identifies a specific Department of Homeland Security (DHS) operating agency. Fully describe 1 DHS operating agency from the following list: Cybersecurity and Infrastructure Security (CISA) U.S. Customs and Border Protection (CBP) U.S. Citizenship and Immigration Services (USCIS) Federal Emergency Management Agency (FEMA) U.S. Coast Guard (USCG) U.S. Immigration and Customs Enforcement (ICE) U.S. Secret Service (USSS) Transportation Security Administration (TSA) The information must include a discussion of the selected DHS agency. Identify the agency’s mission, goals, objectives, and metrics. Conduct an analysis of how these mission areas address the threats or challenges. Recommend agency program priorities among the current set of goals, objectives, metrics, or budget items. Justification of all choices is an essential element of this assignment. Reference all source material and citations using APA format. WE OFF...
Post a Comment
Read more

You have been given the t

PPMP20009 Leading Lean Projects Term 2, 2018 Page 1 of 3 Assessment 1 (Individual Work – 40%) Case study: Managing Lean Project Introduction You have been given the task to organise the FIFA 2018 World Cup football tournament ( https://ift.tt/2If0UDE ). (For those not familiar with football, you may change the event to the recently concluded 2018 Gold Coast Commonwealth Games: https://gc2018.com/ ). Your tasks This assessment item requires you to work INDIVIDUALLY. 1. As the project manager in charge of delivering such as an important world sporting event: i. Identify and elaborate the following terms with regards to the event. a. Voice of the Customer (VOC) b. Critical to Customer Requirements (CCR) c. Critical to Quality parameters (CTQ) ii. In what ways would you have implemented lean project management for this event? Identify and elaborate processes from PMBOK, PRINCE2, Organisational Project iii. Management Agile Practices and Lean Six Sigma (DMAIC Me...
Post a Comment
Read more