Cloud Security Alliance Unveils GRC Stack

Free tools help organizations create public and private clouds that comply with accepted governance, risk, and compliance best practices

The Cloud Security Alliance (CSA) on Wednesday announced the release of a new governance, risk management, and compliance stack for cloud computing. The suite of cloud security tools, available for free download, is meant to help organizations create public and private clouds that comply with industry standards for accepted governance, risk, and compliance (GRC) best practices.

The GRC stack has three components: a technical foundation, a controls framework, and a questionnaire for assessing what the CSA calls "industry-accepted ways to document what security controls exist" for infrastructure-, platform-, and software-as-a-service offerings.

http://www.darkreading.com/security-services/167801101/security/security-management/228300151/cloud-security-alliance-unveils-grc-stack.html