a Refreshed Common Cloud Controls Steering Committee

The newly formed Steering Committee includes representatives from leading financial institutions and technology partners, including Citi, LSEG, Morgan Stanley, RBC, BlackRock, with continued support from organisations such as Red Hat and Scott Logic.

FINOS Common Cloud Controls (CCC) is an open standard initiative defining consistent cybersecurity, resiliency, and compliance controls for public cloud deployments in financial services (Common Cloud Controls). As the project continues to scale across institutions, cloud providers, and vendors, formalising governance is a key step in ensuring long-term sustainability and alignment.

Strengthening Project Governance

The Steering Committee is composed of representatives from participating firms, with each organisation nominating both a primary (cloud-focused) and an alternate (cybersecurity-focused) lead.

Together, the committee spans:

• Strategic direction and roadmap prioritisation
• Selection and definition of cloud services and controls
• Oversight of control catalog releases and validation frameworks
• Progression towards certification and industry adoption

This reflects the continued evolution of CCC as a collaborative, industry-driven standard designed to reduce fragmentation and create a common baseline for secure cloud deployments (Common Cloud Controls).

Get Involved

The CCC project is open to contributions from across the financial services ecosystem, including banks, cloud providers, regulators, and technology vendors.

➡️ Visit the project microsite

➡️ Explore governance and how to participate

➡️Explore FINOS' collection of controls resources