Main site ↗

Docs / GAISSF™ / Crosswalk

GAISSF™ to CSA CCM Crosswalk

ID GAISSF-CRO-034 Framework GAISSF™ Type Crosswalk

Download PDF Document record

Read this first. A crosswalk records a documented correspondence under stated criteria. It does not establish compliance, equivalence, endorsement or certification.
What it coversGAISSF-CRO-034 maps all 59 GAISSF™ v1.0 controls to the 17 security domains of CSA Cloud Controls Matrix (CCM) v4.1. The register contains 281 domain-level mapping records.
Use it whenSupport cloud-security gap analysis for AI systems and AI-enabled cloud services; Identify where GAISSF evidence may support CCM implementation activities; Help allocate control ownership among cloud service providers, customers and other supply-chain actors.
Scope and limitsThis crosswalk is an interpretive mapping aid. It does not establish CSA endorsement, STAR listing, STAR certification or attestation, CAIQ acceptance, control implementation, operating effectiveness, or equivalence between GAISSF and CCM.
Edition mappedCSA Cloud Controls Matrix (CCM) v4.1

Revision history

Date (as stated)EventWhat changed
29 June 2026PublicationPublished as v1.0Source: Page metadata (/crosswalks/cro-034-csa-ccm/)
6 October 2026Document revisionDraft for Publication issued, public and in full; independent crosswalk review openSource: GAISSF-CRO-034_GAISSF-CSA-CCM-Mapping_v1.0.pdf
7 October 2026File correctionWebsite summary: list of publication files now names the files published here (PDF, XLSX, JSON); DOCX and Markdown entries removed (document date unchanged)Source: GAISSF-CRO-034_GAISSF-CSA-CCM_Website-Summary_v1.0.pdf

Website record last updated 7 October 2026. This is the web page, not the document.

More from GAISSF™

SEC-047GAISSF™ Telecommunications Sector Implementation Guide
NOR-001GAISSF™ Framework Standard
NOR-002GAISSF™ Executive Summary
NOR-003GAISSF™ Quick Start Guide
Cite this document
ODA3 Institute. GAISSF™ to CSA CCM Crosswalk (GAISSF-CRO-034), v1.0. Published 29 June 2026. docs.oda3.org/documents/cro-034/

Report a correction or ask about this publication