CCC Object Storage Controls
Control CatalogControls for Object Storage technologies, as defined by the FINOS Common Cloud Controls project.
The GRC Engineering Store
Governance, risk & compliance as data — control catalogs, guidance, policies,
mappings, and the evaluation logs produced when you measure against them.
Content-addressed, versioned, and pullable with grcli or any OCI client.
- 97Artifacts
- 4Organizations
- 421Published versions
Browse by type
Search everything → Controls a mechanism, such as a safeguard or countermeasure, that asserts desired state Guidance prose intended to help bring about a desired outcome for a topic or generalized scenario, based on knowledge of relevant Vectors Capabilities a feature or function of a system; the primary component comprising an attack surface Principles a structured set of related prose and relevant metadata Threats a circumstance or event where the concepts of a vector are applied to a Capability in a specific context, resulting in the potential for negative impact Vectors an opportunity for an attacker to exploit a vulnerability in the system Evaluators Privateer plugin binaries that produce Gemara EvaluationLogs.
Built on Gemara
Gemara is an open, layered schema for expressing GRC as data instead of prose — controls, guidance, threats, and the mappings between them, all in one shape every tool can read. grc.store is a public home for artifacts that follow it.
Recently published
Browse all →CCC Object Storage Threats
Threat CatalogThreats for Object Storage technologies, as defined by the FINOS Common Cloud Controls project.
CCC Object Storage Capabilities
Capability CatalogCapabilities for Object Storage technologies, as defined by the FINOS Common Cloud Controls project.
CCC Block Storage Controls
Control CatalogControls for Block Storage technologies, as defined by the FINOS Common Cloud Controls project.
CCC Block Storage Threats
Threat CatalogThreats for Block Storage technologies, as defined by the FINOS Common Cloud Controls project.
CCC Block Storage Capabilities
Capability CatalogCapabilities for Block Storage technologies, as defined by the FINOS Common Cloud Controls project.