Establishes the processes for securing cloud environments, services, and data across public, private, and hybrid cloud deployments.
Governs the security of cloud-based assets, including secure configuration, access control, data protection, and monitoring, addressing the shared responsibility model.
Misconfigurations remain the leading cause of cloud security incidents, while the shared responsibility model is often misunderstood, creating significant security gaps.
| Control ID | Control Name | Category & Type | Criticality | Status | Requirements | Action |
|---|---|---|---|---|---|---|
| CLD-001 | Cloud Security Governance Establishes cloud security governance in... |
Technical
Detective
|
Critical | Active | 📋 10 Reqs | View → |
| CLD-002 | Cloud Shared Responsibility Management Establishes shared responsibility model... |
Technical
Detective
|
High | Active | 📋 10 Reqs | View → |
| CLD-003 | Secure Cloud Configuration Establishes secure cloud configuration b... |
Technical
Detective
|
High | Active | 📋 10 Reqs | View → |
| CLD-004 | Cloud Identity & Access Management Establishes cloud identity and access ma... |
Technical
Detective
|
Critical | Active | 📋 10 Reqs | View → |
| CLD-005 | Cloud Network Security Establishes cloud network security inclu... |
Technical
Detective
|
Critical | Active | 📋 10 Reqs | View → |
| CLD-006 | Cloud Data Protection Establishes cloud data protection includ... |
Technical
Corrective
|
Critical | Active | 📋 10 Reqs | View → |
| CLD-007 | Cloud Workload & Container Security Establishes cloud workload security incl... |
Technical
Detective
|
Critical | Active | 📋 10 Reqs | View → |
| CLD-008 | Cloud Security Monitoring Establishes cloud security monitoring in... |
Technical
Corrective
|
High | Active | 📋 10 Reqs | View → |
| CLD-009 | Cloud Incident Response Establishes cloud incident response incl... |
Technical
Corrective
|
High | Active | 📋 10 Reqs | View → |
| CLD-010 | Cloud Data Portability & Interoperability Establishes cloud data portability inclu... |
Technical
Preventive
|
High | Active | 📋 10 Reqs | View → |
The following requirements dictate specific audit evidence criteria and testing steps mapped directly under the controls of this domain.
| REQUIREMENT ID | REQUIREMENT TITLE & DETAILS | MAPPED CONTROL | TYPICAL OWNER | ACTION |
|---|---|---|---|---|
| CLD-001-R001 | Cloud Governance Framework The organization shall establish a cloud... | CLD-001 Cloud Security Governance | CISO / Cloud Security Governance | View ↗ |
| CLD-001-R002 | Cloud Security Strategy The organization shall define a cloud se... | CLD-001 Cloud Security Governance | CISO / Cloud Security Governance | View ↗ |
| CLD-001-R003 | Cloud Policies & Standards The organization shall establish cloud s... | CLD-001 Cloud Security Governance | CISO / Cloud Security Governance | View ↗ |
| CLD-001-R004 | Roles & Responsibilities The organization shall clearly define an... | CLD-001 Cloud Security Governance | CISO / Cloud Security Governance | View ↗ |
| CLD-001-R005 | Cloud Risk Governance The organization shall integrate cloud s... | CLD-001 Cloud Security Governance | CISO / Cloud Security Governance | View ↗ |
| CLD-001-R006 | Governance Monitoring The organization shall monitor cloud sec... | CLD-001 Cloud Security Governance | CISO / Cloud Security Governance | View ↗ |
| CLD-001-R007 | Governance Reporting The organization shall report on cloud s... | CLD-001 Cloud Security Governance | CISO / Cloud Security Governance | View ↗ |
| CLD-001-R008 | Governance Review The organization shall conduct periodic... | CLD-001 Cloud Security Governance | CISO / Cloud Security Governance | View ↗ |
| CLD-001-R009 | Exception Management The organization shall manage exceptions... | CLD-001 Cloud Security Governance | CISO / Cloud Security Governance | View ↗ |
| CLD-001-R010 | Governance Continuous Improvement The organization shall drive ongoing enh... | CLD-001 Cloud Security Governance | CISO / Cloud Security Governance | View ↗ |
| CLD-002-R001 | Shared Responsibility Framework The organization shall establish a share... | CLD-002 Cloud Shared Responsibility Ma... | Cloud Security / Third-Party Risk Management | View ↗ |
| CLD-002-R002 | Responsibility Definition The organization shall clearly define an... | CLD-002 Cloud Shared Responsibility Ma... | Cloud Security / Third-Party Risk Management | View ↗ |
| CLD-002-R003 | Provider Responsibility Validation The organization shall validate that clo... | CLD-002 Cloud Shared Responsibility Ma... | Cloud Security / Third-Party Risk Management | View ↗ |
| CLD-002-R004 | Customer Responsibility Management The organization shall manage its own se... | CLD-002 Cloud Shared Responsibility Ma... | Cloud Security / Third-Party Risk Management | View ↗ |
| CLD-002-R005 | Responsibility Communication The organization shall communicate share... | CLD-002 Cloud Shared Responsibility Ma... | Cloud Security / Third-Party Risk Management | View ↗ |
| CLD-002-R006 | Responsibility Monitoring The organization shall monitor shared re... | CLD-002 Cloud Shared Responsibility Ma... | Cloud Security / Third-Party Risk Management | View ↗ |
| CLD-002-R007 | Responsibility Documentation The organization shall maintain comprehe... | CLD-002 Cloud Shared Responsibility Ma... | Cloud Security / Third-Party Risk Management | View ↗ |
| CLD-002-R008 | Responsibility Review The organization shall conduct periodic... | CLD-002 Cloud Shared Responsibility Ma... | Cloud Security / Third-Party Risk Management | View ↗ |
| CLD-002-R009 | Responsibility Reporting The organization shall report on shared... | CLD-002 Cloud Shared Responsibility Ma... | Cloud Security / Third-Party Risk Management | View ↗ |
| CLD-002-R010 | Continuous Improvement The organization shall drive ongoing enh... | CLD-002 Cloud Shared Responsibility Ma... | Cloud Security / Third-Party Risk Management | View ↗ |
| CLD-003-R001 | Configuration Framework The organization shall establish a secur... | CLD-003 Secure Cloud Configuration | Cloud Security Engineering / Cloud Platform Team | View ↗ |
| CLD-003-R002 | Secure Baselines The organization shall define secure con... | CLD-003 Secure Cloud Configuration | Cloud Security Engineering / Cloud Platform Team | View ↗ |
| CLD-003-R003 | Configuration Standards The organization shall define cloud conf... | CLD-003 Secure Cloud Configuration | Cloud Security Engineering / Cloud Platform Team | View ↗ |
| CLD-003-R004 | Configuration Validation The organization shall validate cloud co... | CLD-003 Secure Cloud Configuration | Cloud Security Engineering / Cloud Platform Team | View ↗ |
| CLD-003-R005 | Configuration Monitoring The organization shall monitor cloud con... | CLD-003 Secure Cloud Configuration | Cloud Security Engineering / Cloud Platform Team | View ↗ |
| CLD-003-R006 | Configuration Drift Detection The organization shall detect configurat... | CLD-003 Secure Cloud Configuration | Cloud Security Engineering / Cloud Platform Team | View ↗ |
| CLD-003-R007 | Exception Management The organization shall manage exceptions... | CLD-003 Secure Cloud Configuration | Cloud Security Engineering / Cloud Platform Team | View ↗ |
| CLD-003-R008 | Configuration Reporting The organization shall report on cloud c... | CLD-003 Secure Cloud Configuration | Cloud Security Engineering / Cloud Platform Team | View ↗ |
| CLD-003-R009 | Configuration Review The organization shall conduct periodic... | CLD-003 Secure Cloud Configuration | Cloud Security Engineering / Cloud Platform Team | View ↗ |
| CLD-003-R010 | Continuous Improvement The organization shall drive ongoing enh... | CLD-003 Secure Cloud Configuration | Cloud Security Engineering / Cloud Platform Team | View ↗ |
| CLD-004-R001 | Cloud IAM Framework The organization shall establish a cloud... | CLD-004 Cloud Identity & Access Manage... | Cloud IAM Team | View ↗ |
| CLD-004-R002 | Cloud Identity Management The organization shall manage identities... | CLD-004 Cloud Identity & Access Manage... | Cloud IAM Team | View ↗ |
| CLD-004-R003 | Authentication Management The organization shall authenticate user... | CLD-004 Cloud Identity & Access Manage... | Cloud IAM Team | View ↗ |
| CLD-004-R004 | Authorization Management The organization shall authorize access... | CLD-004 Cloud Identity & Access Manage... | Cloud IAM Team | View ↗ |
| CLD-004-R005 | Privileged Access Management The organization shall manage privileged... | CLD-004 Cloud Identity & Access Manage... | Cloud IAM Team | View ↗ |
| CLD-004-R006 | Federation Management The organization shall manage identity f... | CLD-004 Cloud Identity & Access Manage... | Cloud IAM Team | View ↗ |
| CLD-004-R007 | Access Monitoring The organization shall monitor cloud acc... | CLD-004 Cloud Identity & Access Manage... | Cloud IAM Team | View ↗ |
| CLD-004-R008 | IAM Reporting The organization shall report on cloud I... | CLD-004 Cloud Identity & Access Manage... | Cloud IAM Team | View ↗ |
| CLD-004-R009 | IAM Review The organization shall conduct periodic... | CLD-004 Cloud Identity & Access Manage... | Cloud IAM Team | View ↗ |
| CLD-004-R010 | Continuous Improvement The organization shall drive ongoing enh... | CLD-004 Cloud Identity & Access Manage... | Cloud IAM Team | View ↗ |
| CLD-005-R001 | Network Security Framework The organization shall establish a cloud... | CLD-005 Cloud Network Security | Cloud Network Security Team | View ↗ |
| CLD-005-R002 | Network Segmentation The organization shall implement network... | CLD-005 Cloud Network Security | Cloud Network Security Team | View ↗ |
| CLD-005-R003 | Security Groups & Firewalls The organization shall implement securit... | CLD-005 Cloud Network Security | Cloud Network Security Team | View ↗ |
| CLD-005-R004 | Secure Connectivity The organization shall establish secure... | CLD-005 Cloud Network Security | Cloud Network Security Team | View ↗ |
| CLD-005-R005 | Traffic Protection The organization shall implement traffic... | CLD-005 Cloud Network Security | Cloud Network Security Team | View ↗ |
| CLD-005-R006 | Network Monitoring The organization shall monitor cloud net... | CLD-005 Cloud Network Security | Cloud Network Security Team | View ↗ |
| CLD-005-R007 | Network Logging The organization shall maintain comprehe... | CLD-005 Cloud Network Security | Cloud Network Security Team | View ↗ |
| CLD-005-R008 | Network Reporting The organization shall report on cloud n... | CLD-005 Cloud Network Security | Cloud Network Security Team | View ↗ |
| CLD-005-R009 | Network Review The organization shall conduct periodic... | CLD-005 Cloud Network Security | Cloud Network Security Team | View ↗ |
| CLD-005-R010 | Continuous Improvement The organization shall drive ongoing enh... | CLD-005 Cloud Network Security | Cloud Network Security Team | View ↗ |
| CLD-006-R001 | Data Protection Framework The organization shall establish a cloud... | CLD-006 Cloud Data Protection | Data Protection / Cloud Security Team | View ↗ |
| CLD-006-R002 | Cloud Encryption The organization shall implement encrypt... | CLD-006 Cloud Data Protection | Data Protection / Cloud Security Team | View ↗ |
| CLD-006-R003 | Data Access Protection The organization shall implement access... | CLD-006 Cloud Data Protection | Data Protection / Cloud Security Team | View ↗ |
| CLD-006-R004 | Cloud Backup Protection The organization shall protect cloud bac... | CLD-006 Cloud Data Protection | Data Protection / Cloud Security Team | View ↗ |
| CLD-006-R005 | Data Recovery The organization shall recover data from... | CLD-006 Cloud Data Protection | Data Protection / Cloud Security Team | View ↗ |
| CLD-006-R006 | Data Monitoring The organization shall monitor cloud dat... | CLD-006 Cloud Data Protection | Data Protection / Cloud Security Team | View ↗ |
| CLD-006-R007 | Data Compliance The organization shall ensure cloud data... | CLD-006 Cloud Data Protection | Data Protection / Cloud Security Team | View ↗ |
| CLD-006-R008 | Data Reporting The organization shall report on cloud d... | CLD-006 Cloud Data Protection | Data Protection / Cloud Security Team | View ↗ |
| CLD-006-R009 | Data Review The organization shall conduct periodic... | CLD-006 Cloud Data Protection | Data Protection / Cloud Security Team | View ↗ |
| CLD-006-R010 | Continuous Improvement The organization shall drive ongoing enh... | CLD-006 Cloud Data Protection | Data Protection / Cloud Security Team | View ↗ |
| CLD-007-R001 | Workload Security Framework The organization shall establish a cloud... | CLD-007 Cloud Workload & Container Sec... | Cloud Security Engineering / DevSecOps | View ↗ |
| CLD-007-R002 | Container Security The organization shall implement securit... | CLD-007 Cloud Workload & Container Sec... | Cloud Security Engineering / DevSecOps | View ↗ |
| CLD-007-R003 | Kubernetes Security The organization shall implement securit... | CLD-007 Cloud Workload & Container Sec... | Cloud Security Engineering / DevSecOps | View ↗ |
| CLD-007-R004 | Serverless Security The organization shall implement securit... | CLD-007 Cloud Workload & Container Sec... | Cloud Security Engineering / DevSecOps | View ↗ |
| CLD-007-R005 | Image Security The organization shall implement securit... | CLD-007 Cloud Workload & Container Sec... | Cloud Security Engineering / DevSecOps | View ↗ |
| CLD-007-R006 | Runtime Protection The organization shall implement runtime... | CLD-007 Cloud Workload & Container Sec... | Cloud Security Engineering / DevSecOps | View ↗ |
| CLD-007-R007 | Workload Monitoring The organization shall monitor cloud wor... | CLD-007 Cloud Workload & Container Sec... | Cloud Security Engineering / DevSecOps | View ↗ |
| CLD-007-R008 | Security Reporting The organization shall report on cloud w... | CLD-007 Cloud Workload & Container Sec... | Cloud Security Engineering / DevSecOps | View ↗ |
| CLD-007-R009 | Workload Review The organization shall conduct periodic... | CLD-007 Cloud Workload & Container Sec... | Cloud Security Engineering / DevSecOps | View ↗ |
| CLD-007-R010 | Continuous Improvement The organization shall drive ongoing enh... | CLD-007 Cloud Workload & Container Sec... | Cloud Security Engineering / DevSecOps | View ↗ |
| CLD-008-R001 | Monitoring Framework The organization shall establish a cloud... | CLD-008 Cloud Security Monitoring | SOC / Cloud Security Monitoring Team | View ↗ |
| CLD-008-R002 | Cloud Logging The organization shall log cloud activit... | CLD-008 Cloud Security Monitoring | SOC / Cloud Security Monitoring Team | View ↗ |
| CLD-008-R003 | Security Event Collection The organization shall collect security... | CLD-008 Cloud Security Monitoring | SOC / Cloud Security Monitoring Team | View ↗ |
| CLD-008-R004 | Threat Detection The organization shall implement threat... | CLD-008 Cloud Security Monitoring | SOC / Cloud Security Monitoring Team | View ↗ |
| CLD-008-R005 | Alert Management The organization shall manage security a... | CLD-008 Cloud Security Monitoring | SOC / Cloud Security Monitoring Team | View ↗ |
| CLD-008-R006 | Continuous Monitoring The organization shall continuously moni... | CLD-008 Cloud Security Monitoring | SOC / Cloud Security Monitoring Team | View ↗ |
| CLD-008-R007 | Monitoring Reporting The organization shall report on cloud s... | CLD-008 Cloud Security Monitoring | SOC / Cloud Security Monitoring Team | View ↗ |
| CLD-008-R008 | Monitoring Review The organization shall conduct periodic... | CLD-008 Cloud Security Monitoring | SOC / Cloud Security Monitoring Team | View ↗ |
| CLD-008-R009 | Monitoring Validation The organization shall validate cloud se... | CLD-008 Cloud Security Monitoring | SOC / Cloud Security Monitoring Team | View ↗ |
| CLD-008-R010 | Continuous Improvement The organization shall drive ongoing enh... | CLD-008 Cloud Security Monitoring | SOC / Cloud Security Monitoring Team | View ↗ |
| CLD-009-R001 | Cloud IR Framework The organization shall establish a cloud... | CLD-009 Cloud Incident Response | Incident Response / Cloud Security Team | View ↗ |
| CLD-009-R002 | Incident Detection The organization shall detect security i... | CLD-009 Cloud Incident Response | Incident Response / Cloud Security Team | View ↗ |
| CLD-009-R003 | Incident Investigation The organization shall investigate cloud... | CLD-009 Cloud Incident Response | Incident Response / Cloud Security Team | View ↗ |
| CLD-009-R004 | Incident Containment The organization shall contain cloud sec... | CLD-009 Cloud Incident Response | Incident Response / Cloud Security Team | View ↗ |
| CLD-009-R005 | Incident Recovery The organization shall recover from clou... | CLD-009 Cloud Incident Response | Incident Response / Cloud Security Team | View ↗ |
| CLD-009-R006 | Cloud Forensics The organization shall establish forensi... | CLD-009 Cloud Incident Response | Incident Response / Cloud Security Team | View ↗ |
| CLD-009-R007 | Incident Communication The organization shall communicate cloud... | CLD-009 Cloud Incident Response | Incident Response / Cloud Security Team | View ↗ |
| CLD-009-R008 | Incident Reporting The organization shall report on cloud s... | CLD-009 Cloud Incident Response | Incident Response / Cloud Security Team | View ↗ |
| CLD-009-R009 | Incident Review The organization shall conduct periodic... | CLD-009 Cloud Incident Response | Incident Response / Cloud Security Team | View ↗ |
| CLD-009-R010 | Continuous Improvement The organization shall drive ongoing enh... | CLD-009 Cloud Incident Response | Incident Response / Cloud Security Team | View ↗ |
| CLD-010-R001 | Portability Framework The organization shall establish a cloud... | CLD-010 Cloud Data Portability & Inter... | Cloud Architecture / Data Governance Team | View ↗ |
| CLD-010-R002 | Data Export Management The organization shall export data from... | CLD-010 Cloud Data Portability & Inter... | Cloud Architecture / Data Governance Team | View ↗ |
| CLD-010-R003 | Secure Data Migration The organization shall securely migrate... | CLD-010 Cloud Data Portability & Inter... | Cloud Architecture / Data Governance Team | View ↗ |
| CLD-010-R004 | Interoperability Standards The organization shall define and adhere... | CLD-010 Cloud Data Portability & Inter... | Cloud Architecture / Data Governance Team | View ↗ |
| CLD-010-R005 | Exit Strategy Management The organization shall develop and maint... | CLD-010 Cloud Data Portability & Inter... | Cloud Architecture / Data Governance Team | View ↗ |
| CLD-010-R006 | Migration Validation The organization shall validate that dat... | CLD-010 Cloud Data Portability & Inter... | Cloud Architecture / Data Governance Team | View ↗ |
| CLD-010-R007 | Portability Monitoring The organization shall monitor data port... | CLD-010 Cloud Data Portability & Inter... | Cloud Architecture / Data Governance Team | View ↗ |
| CLD-010-R008 | Portability Reporting The organization shall report on data po... | CLD-010 Cloud Data Portability & Inter... | Cloud Architecture / Data Governance Team | View ↗ |
| CLD-010-R009 | Portability Review The organization shall conduct periodic... | CLD-010 Cloud Data Portability & Inter... | Cloud Architecture / Data Governance Team | View ↗ |
| CLD-010-R010 | Continuous Improvement The organization shall drive ongoing enh... | CLD-010 Cloud Data Portability & Inter... | Cloud Architecture / Data Governance Team | View ↗ |
| Framework Code | Framework Name & Description | Family / Category | Version | Action |
|---|---|---|---|---|
| MAPPED | NIST SP 800-144 Crosswalk regulatory baseline mapped under ASPIA UCL. | Standard | Baseline | — |
| MAPPED | NIST SP 800-145 Crosswalk regulatory baseline mapped under ASPIA UCL. | Standard | Baseline | — |
| MAPPED | CSA CCM Crosswalk regulatory baseline mapped under ASPIA UCL. | Standard | Baseline | — |
| MAPPED | ISO 27017 Crosswalk regulatory baseline mapped under ASPIA UCL. | Standard | Baseline | — |
| MAPPED | ISO 27018 Crosswalk regulatory baseline mapped under ASPIA UCL. | Standard | Baseline | — |
| SOC2 | SOC 2 SOC 2 is an independent examination and... |
AICPA
Audit Framework
|
vLatest | View → |
| PCI-DSS | PCI DSS PCI DSS is an industry security standard... |
PCI
Standard
|
v4 | View → |
| GDPR | GDPR The General Data Protection Regulation i... |
EU
Regulation
|
vCurrent | View → |
| NIST-CSF | NIST CSF (PR.AC) The NIST Cybersecurity Framework provide... |
NIST
Framework
|
v2 | View → |