Skip to content
Cloud SecurityUnited States

CISA Cloud Security Technical Reference Architecture v2.0

What is CISA Cloud Security Technical Reference Architecture v2.0?

CISA's cloud security reference architecture for federal agencies: FedRAMP continuous monitoring and incident communication, secure cloud migration with DevSecOps and centralised services, and cloud security posture management across governance, identity, data, infrastructure, monitoring, APIs, logging and automated deployment. It comprises 26 controls organised across 3 domains, and applies in the United States.

Map this against the frameworks you already hold

The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.

Browse the framework graph →

Where CISA Cloud Security Technical Reference Architecture v2.0 overlaps with the standards you already hold

What CISA Cloud Security Technical Reference Architecture v2.0 means in your sector

What CISA Cloud Security Technical Reference Architecture v2.0 means for your job

Questions people ask about CISA Cloud Security Technical Reference Architecture v2.0

What is CISA Cloud Security Technical Reference Architecture v2.0?
CISA's cloud security reference architecture for federal agencies: FedRAMP continuous monitoring and incident communication, secure cloud migration with DevSecOps and centralised services, and cloud security posture management across governance, identity, data, infrastructure, monitoring, APIs, logging and automated deployment.
How many controls does CISA Cloud Security Technical Reference Architecture v2.0 have?
CISA Cloud Security Technical Reference Architecture v2.0 contains 26 controls organized across 3 domains.
Where does CISA Cloud Security Technical Reference Architecture v2.0 apply?
CISA Cloud Security Technical Reference Architecture v2.0 applies in United States. Organizations operating in or serving customers in this jurisdiction should check whether its requirements reach them.
Which version of CISA Cloud Security Technical Reference Architecture v2.0 is covered here?
This page covers Cloud Security Technical Reference Architecture Version 2.0 (June 2022).

Query CISA Cloud Security Technical Reference Architecture v2.0 programmatically

CISA Cloud Security Technical Reference Architecture v2.0, its 26 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.

CISA Cloud Security Technical Reference Architecture v2.0 API reference and MCP config →

How ready are you for CISA Cloud Security Technical Reference Architecture v2.0?

Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.

Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .