Cloud Computing Control Framework for Financial Services

— Program Management (PM) Planning (PL) Privacy (AR/UL) Enterprise System & Services Acquisition (ESA)​ Risk Assessment (RA)​ Awareness & Training (AT)​ System and Communications Protection (SC) Media Protection (MP) Identification & Authentication (IA) Access Control (AC) System and Information Integrity (SI) Security Assessment & Authorization (CA) Contingency Planning (CP) Physical and Environmental Protection (PE) Personnel Security (PS) System and Services Acquisition (SA) Maintenance (MA) Configuration Management (CM) Enterprise Data Management (EDM) Audit & Accountability (AU) Incident Response (IR)

— Administrative Technical Physical Administrative or Technical Physical or Technical