https://www.youtube.com/watch?v=B2xFWrBSugY

from ccsp-mnemonics.

Relevancy

Updates of CCSP vs CSA CCM

1. Domain-Refresh-FAQ states,

August 2022

The changes will begin on August 1, 2022.

Yes. Beginning August 1, the CCSP exam will increase in length from 100 operational items with 25 pretest (unscored) items to 100 operational items with 50 pretest items. To allow for all items to be answered, the exam time will be increased from three to four hours.

The updated Official (ISC)² CCSP Training Course will be available on August 1, 2022.

2. This official community post written by Community Manager states,

CCSP Domain Changes Effective August 1, 2022

On August 1, 2022, (ISC)² will refresh the CCSP credential exam. These updates are the result of the Job Task Analysis (JTA), which is an analysis of the current content of the credential evaluated by (ISC)² members on a triennial cycle. The domain weights for the CCSP have changed as noted in the chart below:

3. Booktopia book bundle

Published: 13th October 2022

• (1), (2) - yield: August 1, 2022
• (3) - yields: 13th October 2022

from ccsp-mnemonics.

Comparison

• CSA press release

SEATTLE – Dec. 8, 2021 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud computing environment, today released the Cloud Controls Matrix (CCM) Auditing Guidelines. Drafted by the CCM Working Group, this new addition to the Cloud Controls Matrix v4 contains a set of auditing guidelines tailored to the control specifications of each of the CCM’s 17 cloud security domains. This document provides auditors with a baseline understanding of the CCM audit areas, allowing them to better perform a CCM-related audit and assessment.

This is the latest known release, see also:

• https://www.youtube.com/watch?v=8UgOyjoMbDg
• https://community.isc2.org/t5/Cloud-Security/Cloud-Controls-Matrix-CCM-v4-Released/td-p/42755

So as of June 2023, CCM v4 is the latest version, and will likely stay so for a few years

from ccsp-mnemonics.

TODO

1. Add separate file with CSA investigation above
2. Add CSA Cloud Controls matrix video
3. Add why the video is very notable (very trustworthy source)
4. Add CSA Cloud Controls matrix description

from ccsp-mnemonics.

! added CCMv4 metainformation document

from ccsp-mnemonics.

4 - completed in trick
ISACA has CISM, CSA has ISACA in CCM

from ccsp-mnemonics.

2-3 NO. The video is actually detrimental, as it gives impression that CSA's CCM (v4) is about listing security dmains. CCM is not.

CCM is about mapping different vendors and frameworks to achieve Cloud Securirt

Recall!

ISACA has CISM, CSA has ISACA in CCM

from ccsp-mnemonics.