CLD

Cloud Security

19 controls

Govern cloud services and environments through risk-based, cloud-native security, compliance and resilience practices aligned with shared responsibility obligations.

SCF #	Control Name	Weight	NIST CSF	Frameworks
CLD-01	Cloud Security Policy	10 — Critical	Govern	4
CLD-02	Cloud Services	10 — Critical	Govern	39
CLD-03	Cloud Infrastructure Onboarding	9 — Critical	Protect	5
CLD-03.1	Customer Responsibility Matrix (CRM)	8 — High	Identify	14
CLD-04	Cloud Infrastructure Offboarding	9 — Critical	Protect	5
CLD-05	Cloud Security Architecture	8 — High	Protect	25
CLD-06	Cloud Infrastructure Security Subnet	6 — Medium	Protect	11
CLD-07	Multi-Tenant Environments	9 — Critical	Protect	19
CLD-07.1	Multi-Tenant Event Logging Capabilities	8 — High	Identify	4
CLD-07.2	Multi-Tenant Forensics Capabilities	8 — High	Identify	3
CLD-07.3	Multi-Tenant Incident Response Capabilities	8 — High	Identify	3
CLD-08	Data Handling & Portability	4 — Medium	Protect	3
CLD-09	Standardized Virtualization Formats	4 — Medium	Protect	2
CLD-10	Sensitive Data In Public Cloud Providers	6 — Medium	Protect	9
CLD-11	Cloud Access Security Broker (CASB)	7 — High	Protect	3
CLD-12	Hosted Technology Assets, Applications and/or Services (TAAS)	9 — Critical	Protect	2
CLD-12.1	Authorized Individuals For Hosted Technology Assets, Applications and/or Services (TAAS)	9 — Critical	Protect	0
CLD-12.2	Sensitive / Regulated Data On Hosted Technology Assets, Applications and/or Services (TAAS)	9 — Critical	Protect	0
CLD-13	Prohibition On Unverified Hosted Technology Assets, Applications and/or Services (TAAS)	8 — High	Protect	0

The Secure Controls Framework (SCF) is maintained by SCF Council. Use of SCF content is subject to the SCF Terms & Conditions.

Cloud Security

Manage SCF Controls in SCF Connect