Curriculum traceability

CSA Cloud Controls Matrix

This matrix shows how each curriculum area maps to CSA Cloud Controls Matrix requirements — the clause or control it supports, how it's taught, and the evidence the learner and organization receive. It's a sample, illustrative mapping; your live records (completions, assessment scores, version history) form the per-organization evidence pack.

What this supports — and what it doesn't

These programs support preparation for CSA Cloud Controls Matrix certification: they deliver the awareness and competence training the standard requires (notably Clause 7.2 Competence, 7.3 Awareness, and Annex A 6.3) and produce the documented completion and assessment records auditors look for. They do not by themselves certify your organization or any individual, and they don't guarantee certification — your organization still implements the management system and is audited by an accredited certification body. Training is the supporting evidence, not the certificate.

CSA CCM + STAR Cloud Security Practitioner

Curriculum areaCSA clauses / controlsMethodEvidence produced
CCM Foundations + Shared Responsibility
CCM v4
Lesson + KCCompletion + score
STAR Levels + Pillars
STAR Level 1/2/3
Lesson + KCCompletion + score

Hover a clause code for its title. Clause references follow CSA Cloud Controls Matrix. For a per-organization, audit-ready evidence pack, get in touch.