A dot release of the Cloud Controls Matrix (CCM) indicates:

A dot release of the Cloud Controls Matrix (CCM) indicates a technical change (revision, addition, or

deletion) of a number of controls that is smaller than 10% compared to the previous full release. A

dot release is a minor update to the CCM that reflects the feedback from the cloud security

community and the changes in the cloud technology landscape. A dot release does not change the

domain structure or the overall scope of the CCM, but rather improves the clarity, accuracy, and

relevance of the existing controls. A dot release is denoted by a decimal number after the major

version number, such as CCM v4.1 or CCM v4.2. The current version of the CCM is v4.0, which was

released in October 20211.

The other options are incorrect because:

A . a revision of the CCM domain structure: A revision of the CCM domain structure is a major change

that affects the organization and categorization of the controls into different domains. A revision of

the CCM domain structure requires a full release, not a dot release, and is denoted by an integer

number, such as CCM v3 or CCM v42.

C . the introduction of new control frameworks mapped to previously published CCM controls: The

introduction of new control frameworks mapped to previously published CCM controls is an

additional feature that enhances the usability and applicability of the CCM. The introduction of new

control frameworks mapped to previously published CCM controls does not require a dot release or

a full release, but rather an update to the mapping table that shows the relationship between the

CCM controls and other industry-accepted security standards, regulations, and frameworks3.

D . technical change (revision, addition, or deletion) of a number of controls that is greater than 10%

compared to the previous full release: A technical change (revision, addition, or deletion) of a

number of controls that is greater than 10% compared to the previous full release is a significant

change that affects the content and scope of the CCM. A technical change (revision, addition, or

deletion) of a number of controls that is greater than 10% compared to the previous full release

requires a full release, not a dot release, and is denoted by an integer number, such as CCM v3 or

CCM v42.

Reference:

Cloud Controls Matrix (CCM) - CSA

The CSA Cloud Controls Matrix (CCM) V4: Raising the cloud security bar

Cloud Security Alliance Releases New Cloud Controls Matrix Auditing Guidelines