Core | CCC

Core

The Common Cloud Controls Core catalog serves as a foundational repository of reusable security controls, capabilities, and threat models that can be referenced and imported by other service-specific catalogs. This provides a centralized mechanism for maintaining consistency and reducing duplication across the broader controls ecosystem.

Version	Release Manager	Authors	Controls	Threats	Capabilities
v2025.10	Eddie Knight@eddie-knight Sonatype	Michael Lysaght@mlysaght2017 Citi Sonali Mendis@smendis-scottlogic Scott Logic Gabriela Georgieva@gabriellavengeo ControlPlane Jennifer Power@jpower432 Red Hat Rob@rkenefeck ControlPlane Andrew Martin@sublimino ControlPlane Eddie Knight@eddie-knight Sonatype Rob Moffat@robmoffat FINOS	13	19	30
DEV	Development Team	Development Team	13	19	30

Mapping References

Cyber Controls Matrixv4.0

The Cloud Controls Matrix (CCM) is a cybersecurity framework developed by the Cloud Security Alliance (CSA) to provide a structured and standardized set of security controls for cloud computing environments. The primary purpose of CCM is to help organizations assess the overall security posture of their cloud infrastructure and services.

MITRE ATT&CK Framework12.0

MITRE ATT&CK® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community.

Contribute to the Next Release

This catalog is maintained as versioned YAML files. Generated artifacts are published here as each release is cut.

View on GitHub →