By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.
PreferencesDenyAccept
Back to glossary

Cloud Security Maturity Model (CSMM)

A five-level, twelve-capability framework, developed by the Cloud Security Alliance, Securosis, and IANS Research, for benchmarking how far a program has moved from manual and reactive toward automated and preventive.

Table of contents
Section title

Related glossary terms

Preventive Cloud Security (PCS)

The category name for solutions that stop misconfigurations and risky actions before they happen, instead of detecting them after deployment. PCS tools enable organizations to define and enforce their security policies and guardrails at the cloud control plane, at the moment a change is attempted, regardless of how that change is introduced.

Read definition

Detect-and-remediate model

The traditional, reactive approach where a risk must already exist in your cloud before a scanner can find it and a team can fix it.

Read definition

Enforcement-first security

An operating model where policy is enforced automatically the moment a change is attempted, rather than only observed and reported on afterward.

Read definition

Cloud security governance

The framework of policies, ownership, and processes an organization uses to decide what's allowed in its cloud environment and to make sure those decisions are actually enforced, not just documented.

Read definition

Ready to take your first proactive step?

Watch a Demo Now!