The Cloud Controls framework are a set of controls for cloud providers. They cover risks associated with cloud security and help differentiate the lines between host responsibility and customer responsibility.
The cloudcontrols framework also contains a mapping from the ISO/IEC 27002 standard, and mappings to the following security standards:
- The draft of the ISO/IEC 27017 (Cloud Security)
- CSA Cloud Controls Matrix
- The Dutch National Cyber Security Center – security measure for web applications