Which industry organization offers both security controls and cloud-relevant benchmarking?

The Cloud Security Alliance (CSA) provides both cloud-specific security controls (Cloud Controls Matrix, CCM) and benchmarking tools like the CSA STAR program. CSA’s CCM maps industry standards and best practices tailored to cloud security requirements, and STAR provides a transparency and assurance framework for benchmarking security maturity. These resources are widely used and referenced in ISACA’s CCAK for cloud auditing and are integral for organizations seeking structured guidance on cloud security.

=========================