--- title: FINOS Common Cloud Controls Project Resources description: View resources from FINOS Common Cloud Controls - an open standard project that describes consistent controls for compliant public cloud deployments in the financial services (FS) sector. image: https://www.finos.org/hubfs/Projects%20+%20SIGs/FINOS%20Common%20cloud%20controls%20(CCC)/FINOS%20CCC%20Common%20Cloud%20Controls%20Resources%20Page.png --- [![FINOS](https://www.finos.org/hs-fs/hubfs/sofin%20assets/SOFIN%20LOGOS/finos-logo.png?width=543&height=126&name=finos-logo.png "FINOS")](https://finos.org) - [Projects](https://www.finos.org/projects) - [Artificial Intelligence (AI)](https://ai.finos.org/) - [Common Domain Model (CDM)](https://www.finos.org/common-domain-model) - [FDC3](https://www.finos.org/fdc3) - [Fluxnova](https://fluxnova.finos.org) - [FINOS Common Cloud Controls](https://www.finos.org/common-cloud-controls-project) - [High Performance Computing (HPC)](https://hpc.finos.org) - [OSERA](https://osera.finos.org/) - [Open Source Readiness Initiative](https://www.finos.org/open-source-readiness) - [OS-Climate](https://www.finos.org/os-climate) - [Try our Projects](https://www.finos.org/project-sandbox) - [All Projects Landscape](https://landscape.finos.org/) - [Community](https://www.finos.org/engage-with-our-community) - [FINOS Community Calendar](https://www.finos.org/calendar) - [Community Quickstart](https://www.finos.org/get-involved) - [FINOS Community Site](https://community.finos.org/) - [Contribute](https://community.finos.org/docs/governance/Software-Projects/contribution) - [Unable to Contribute?](https://www.finos.org/open-source-readiness) - [Join our Slack channel](https://finos-lf.slack.com/messages/finos-community/) - [Recognize a contributor](https://github.com/finos/community/issues/new?assignees=mcleo-d&labels=community-recognition&template=Community-Recognition.md&title=FINOS+Community+Recognition) - [Ambassador Program](https://www.finos.org/ambassador-program) - [Membership](https://www.finos.org/membership-benefits) - [Members](https://www.finos.org/members) - [Inquire](https://www.finos.org/membership-benefits#become-a-member) - [Join](https://joinnow.platform.linuxfoundation.org/?project=finos) - [Member ROI Summary & Calculator](https://www.finos.org/roi-report-calculator) - [Dependency Consumption Analysis](https://www.finos.org/dependency-consumption-analysis) - Resources - [2025 Mission & Vision](https://www.finos.org/2024-in-review-2025-vision) - [Research & Case Studies](https://www.finos.org/research-case-studies) - [Training](https://training.linuxfoundation.org/finos/) - [Open Source Maturity Model](https://osr.finos.org/docs/bok/OSMM/Introduction) - [Contributions Live Dashboard](https://metrics.finos.org) - [Our Github Organization](https://github.com/finos/) - [Our Developer Toolchain](https://odp.finos.org/) - [FINOS Store](https://store-finos.myshopify.com/) - News & Events - [This Week At FINOS](https://www.finos.org/this-week-at-finos) - [Community Blog](https://www.finos.org/blog) - [Newsletter](https://www.finos.org/newsletter) - [Podcast: Open Source in Finance](https://www.finos.org/open-source-in-finance-podcast) - [Press Releases](https://www.finos.org/press) - [FINOS Events](https://www.finos.org/hosted-events) - [Community Events](https://www.finos.org/featured-events) - [Community Spotlight](https://www.finos.org/community-spotlight) - [Stay Informed](https://www.finos.org/sign-up) - [About](https://www.finos.org/about-us) - [Stay Informed](https://www.finos.org/sign-up) - [FAQs](https://www.finos.org/faq) - [Contact Us](https://www.finos.org/contact-us) - [Governing Board](https://www.finos.org/governing-board) - [Technical Oversight Committee](https://www.finos.org/technical-oversight-committee) - [Team](https://www.finos.org/team) - [Governance](https://www.finos.org/governance) - [Code of Conduct](https://www.finos.org/code-of-conduct) - [OSFF + Videos](https://events.linuxfoundation.org/open-source-finance-forum) - [OSFF 2026](https://www.finos.org/osff-ny-26-landing-page) - [Fluxnova Con at OSFF NY](https://www.finos.org/fluxnova-con-at-osff-ny-2026) - [OSFF NY Workshops](https://www.finos.org/osff-ny-2026-workshops) - [OSFF Toronto 2026 Videos](https://www.finos.org/osff-toronto-2026-videos) - [OSFF New York 2025 Videos](https://www.finos.org/osff-nyc-2025-videos) - [OSFF London 2026 Videos](https://www.finos.org/osff-london-2026-videos) - [apidays Paris 2025 Videos](https://www.finos.org/apidays) - [Projects](https://www.finos.org/projects) - [Artificial Intelligence (AI)](https://ai.finos.org/) - [Common Domain Model (CDM)](https://www.finos.org/common-domain-model) - [FDC3](https://www.finos.org/fdc3) - [Fluxnova](https://fluxnova.finos.org) - [FINOS Common Cloud Controls](https://www.finos.org/common-cloud-controls-project) - [High Performance Computing (HPC)](https://hpc.finos.org) - [OSERA](https://osera.finos.org/) - [Open Source Readiness Initiative](https://www.finos.org/open-source-readiness) - [OS-Climate](https://www.finos.org/os-climate) - [Try our Projects](https://www.finos.org/project-sandbox) - [All Projects Landscape](https://landscape.finos.org/) - [Community](https://www.finos.org/engage-with-our-community) - [FINOS Community Calendar](https://www.finos.org/calendar) - [Community Quickstart](https://www.finos.org/get-involved) - [FINOS Community Site](https://community.finos.org/) - [Contribute](https://community.finos.org/docs/governance/Software-Projects/contribution) - [Unable to Contribute?](https://www.finos.org/open-source-readiness) - [Join our Slack channel](https://finos-lf.slack.com/messages/finos-community/) - [Recognize a contributor](https://github.com/finos/community/issues/new?assignees=mcleo-d&labels=community-recognition&template=Community-Recognition.md&title=FINOS+Community+Recognition) - [Ambassador Program](https://www.finos.org/ambassador-program) - [Membership](https://www.finos.org/membership-benefits) - [Members](https://www.finos.org/members) - [Inquire](https://www.finos.org/membership-benefits#become-a-member) - [Join](https://joinnow.platform.linuxfoundation.org/?project=finos) - [Member ROI Summary & Calculator](https://www.finos.org/roi-report-calculator) - [Dependency Consumption Analysis](https://www.finos.org/dependency-consumption-analysis) - Resources - [2025 Mission & Vision](https://www.finos.org/2024-in-review-2025-vision) - [Research & Case Studies](https://www.finos.org/research-case-studies) - [Training](https://training.linuxfoundation.org/finos/) - [Open Source Maturity Model](https://osr.finos.org/docs/bok/OSMM/Introduction) - [Contributions Live Dashboard](https://metrics.finos.org) - [Our Github Organization](https://github.com/finos/) - [Our Developer Toolchain](https://odp.finos.org/) - [FINOS Store](https://store-finos.myshopify.com/) - News & Events - [This Week At FINOS](https://www.finos.org/this-week-at-finos) - [Community Blog](https://www.finos.org/blog) - [Newsletter](https://www.finos.org/newsletter) - [Podcast: Open Source in Finance](https://www.finos.org/open-source-in-finance-podcast) - [Press Releases](https://www.finos.org/press) - [FINOS Events](https://www.finos.org/hosted-events) - [Community Events](https://www.finos.org/featured-events) - [Community Spotlight](https://www.finos.org/community-spotlight) - [Stay Informed](https://www.finos.org/sign-up) - [About](https://www.finos.org/about-us) - [Stay Informed](https://www.finos.org/sign-up) - [FAQs](https://www.finos.org/faq) - [Contact Us](https://www.finos.org/contact-us) - [Governing Board](https://www.finos.org/governing-board) - [Technical Oversight Committee](https://www.finos.org/technical-oversight-committee) - [Team](https://www.finos.org/team) - [Governance](https://www.finos.org/governance) - [Code of Conduct](https://www.finos.org/code-of-conduct) - [OSFF + Videos](https://events.linuxfoundation.org/open-source-finance-forum) - [OSFF 2026](https://www.finos.org/osff-ny-26-landing-page) - [Fluxnova Con at OSFF NY](https://www.finos.org/fluxnova-con-at-osff-ny-2026) - [OSFF NY Workshops](https://www.finos.org/osff-ny-2026-workshops) - [OSFF Toronto 2026 Videos](https://www.finos.org/osff-toronto-2026-videos) - [OSFF New York 2025 Videos](https://www.finos.org/osff-nyc-2025-videos) - [OSFF London 2026 Videos](https://www.finos.org/osff-london-2026-videos) - [apidays Paris 2025 Videos](https://www.finos.org/apidays) ![](https://www.finos.org/hubfs/FINOS/website/banner-backgrounds/10.04.19.FINOS_WebsiteBanners_3.png) ## **FINOS CCC - RESOURCES** ## Defining Best Practices Around Cloud Security FINOS Common Cloud Controls (FINOS CCC) is an open standard project that describes consistent controls for compliant public cloud deployments in the financial services (FS) sector. This standard is a collaborative project which aims to develop a unified set of cybersecurity, resiliency, and compliance controls for common services across the major cloud service providers (CSPs). | [![FINOS CCC Links](https://no-cache.hubspot.com/cta/default/2419532/interactive-190635258531.png)](https://www.finos.org/hs/cta/wi/redirect?encryptedPayload=AVxigLKX3U18xH7lfKA1Srsz1u4f%2FQC8pmHIrRGTqZyccR9ttTiZKEpFg7SRJYWyMsnoNyLL%2BHBB5R8fEl7XUPipQRvdDQV3iSbCGI4%2FKdemyzRf9aJgKwntB14tItH15F%2FqEwd5KMU4tjOePIDuya983ise7SHBdcvVKawGFs1h1YGlj%2B6wtPDwKe4PAqfpLSD1Z3ON7A05GgKdx0dnNYFepM2Wk0CjPGul3cboPdZMAbtRKNkvPyw%3D&webInteractiveContentId=190635258531&portalId=2419532&hsLang=ja-jp) | [![FINOS CCC Videos](https://no-cache.hubspot.com/cta/default/2419532/interactive-190635277710.png)](https://www.finos.org/hs/cta/wi/redirect?encryptedPayload=AVxigLJdjlrv4mMZZ0TR9gKJxi5V1FfkZ2sbqr2s9QduyOaN%2FkYi68ZjouoGRRnyvH%2FsqZZUZ3vSpvjpFB%2FD3zkMydmSuNi6BoOswA0qTzUR3KAsxcoHhfC40aXGN4dZP6tjMu6h2x0yhQfhGmde4opmrL3CvIKsQRJdww3%2FGEEupWLyU6GwcY60lX98dgU%2Bx9D6Y%2FxXzYJtONOSKUXB39t3r%2B3IKs1CvHeEREBUFPhljt8It9oT58iZ&webInteractiveContentId=190635277710&portalId=2419532&hsLang=ja-jp) | | --- | --- | | [![FINOS CCC Documents](https://no-cache.hubspot.com/cta/default/2419532/interactive-190636995346.png)](https://www.finos.org/hs/cta/wi/redirect?encryptedPayload=AVxigLJa5yWfQL9H%2BwcxLx0rT4qKb6jMAQ7RuHmFxHzzmI%2BoAMH85BkK%2Fjv48ujFdwZJXUoYlbiRQzS0P5kCTXiWDoB6A%2FVBWs876T%2BKOLmzQUjUdDOIluc9SrOxpLbDrXuIpdMK05aMaCVBqEM%2BU%2B8N8AdzoPX6ijNMBn1x%2FlxUE%2B5KVw6xSUdUhXVh%2BsUUiWqRAsUpogu6t9%2B5st4S3QNUB8tXFMmqhK2YKDECgp9MhwXmdn7kHQ%3D%3D&webInteractiveContentId=190636995346&portalId=2419532&hsLang=ja-jp) | [![Get Involved](https://no-cache.hubspot.com/cta/default/2419532/interactive-190636995335.png)](https://www.finos.org/hs/cta/wi/redirect?encryptedPayload=AVxigLLSMq50W8UXbvmh2IWiuJf5J0qAnut7pkWntmwI67eqjimi8H%2FXVnDB1CEGXYf03YHelvIevTVSYe2mp%2BhXQ2iz3YvekTq5miJFKZ9dIY%2F7SMGZA%2BQoUii3PU%2FzNz82SPNoLk3GTalycPMrFVb2qle3MpIqiqN%2BFWv33R0XD9ankEOIHuA5japFYUOLcgmvkS2jQlXayn9II4BEQGeY3Vr3mwUATOvHiBlNnLwKiES28hsw1Q%3D%3D&webInteractiveContentId=190636995335&portalId=2419532&hsLang=ja-jp) | ## Introducing Common Controls for AI Services An open, collaborative project to create technology-neutral baseline standards for AI usage across cloud and hybrid environments, peer-reviewed governance frameworks and Real-time validation mechanisms (“Regulation-as-Code”). [Read more in the Press Release](https://www.finos.org/press/global-financial-institutions-and-technology-leaders-collaborate-under-finos-to-launch-open-source-common-controls-for-ai-services?hsLang=ja-jp) # FINOS CCC RESOURCES Explore key FINOS CCC resources including documentation, GitHub repositories, videos, and more to help you understand, implement, and contribute to the project. ## FINOS CCC LINKS   [![Get Involved with FINOS CCC](https://www.finos.org/hubfs/Projects%20+%20SIGs/FINOS%20Common%20cloud%20controls%20(CCC)/FINOS%20CCC%20Common%20Cloud%20Controls%20Get%20Involved.png)](https://ccc.finos.org/) Get Involved with FINOS CCC The FINOS CCC documentation site offers concrete ways to get involved and in depth information. [![FINOS CCC GitHub Repo](https://www.finos.org/hubfs/Projects%20+%20SIGs/FINOS%20Common%20cloud%20controls%20(CCC)/Common%20Cloud%20Controls%20Github.png)](https://github.com/finos/common-cloud-controls) FINOS CCC GitHub Repo FINOS CCC is maintained and run through GitHub. Check the issues to see if there's anything you'd like to work on. [![Common Controls for AI Services Press Release](https://www.finos.org/hubfs/BMO%2c%20Citi%2c%20Microsoft%2c%20Morgan%20Stanley%2c%20RBC%2c%20Google%20Cloud%2c%20Red%20Hat%2c%20AWS%20and%20others%20join%20forces%20to%20set%20secure%2c%20standardized%20AI%20controls%20for%20financial%20services.png)](https://www.finos.org/press/global-financial-institutions-and-technology-leaders-collaborate-under-finos-to-launch-open-source-common-controls-for-ai-services?hsLang=ja-jp) Common Controls for AI Services Press Release BMO, Citi, Microsoft, Morgan Stanley, RBC, Google Cloud, Red Hat, AWS and others join forces to set secure, standardized AI controls for financial services. [![How To Contribute](https://www.finos.org/hubfs/CC4AI%20Contributor%20Experience%20(1).jpg)](https://www.finos.org/hubfs/Projects%20%2B%20SIGs/Artificial%20Intelligence%20(AI)/CC4AI%20Contributor%20Experience%20(black).pdf?hsLang=ja-jp) How To Contribute Become a project contributor by sharing your experience and best practises with the community --- ## FINOS CCC VIDEOS ![Announcing Common Controls for AI Services (CC4AI)](https://www.finos.org/hubfs/Projects%20+%20SIGs/CC4AI/2025%20Q3%20-%20FINOS%20All%20Community%20Call-4.png) ▶ Announcing Common Controls for AI Services (CC4AI) An open, collaborative project to create technology-neutral baseline standards for AI usage across cloud and hybrid environments, peer-reviewed governance frameworks and Real-time validation mechanisms (“Regulation-as-Code”). ![Before You Build, Check What You Have: Practical Approaches To Assess Compliance Before Enforcement](https://www.finos.org/hubfs/OSFF%202025%20(Open%20Source%20in%20Finance%20Forum)/OSFF%20New%20York%20NYC%202025/OSFF%20NYC%202025%20Videos/The%20Launchpad%20Incubating%20FINOS%20Projects/Before%20You%20Build%2c%20Check%20What%20You%20Have%20Practical%20Approaches%20To%20Assess%20Compliance%20B...%20Santosh%20Maurya.jpg) ▶ Before You Build, Check What You Have: Practical Approaches To Assess Compliance Before Enforcement Rather than prescribing a single solution, the session offers early design perspectives, implementation considerations, and practical observations based on real-world infrastructure patterns. The aim is to support adaptable, insight-driven CCC adoption that reduces risk and accommodates diverse organizational contexts, including hybrid and regionally governed environments. ![Declarative by Default, Secure by Design: GitOps as a Control Plane for AI Governance](https://www.finos.org/hubfs/OSFF%202025%20(Open%20Source%20in%20Finance%20Forum)/OSFF%20New%20York%20NYC%202025/OSFF%20NYC%202025%20Videos/Mutualizing%20Risk%20and%20Compliance%20in%20the%20Open/Declarative%20by%20Default%2c%20Secure%20by%20Design%20GitOps%20as%20a%20Contro...%20Francesco%20Beltramini%20%26%20Andrew%20Martin.jpg) ▶ Declarative by Default, Secure by Design: GitOps as a Control Plane for AI Governance At the dawn of responsible, auditable, and explainable use of AI in financial services, the FINOS AI Governance Framework (AIGF) and Common Cloud Controls (CCC) define how compliant AI and secure cloud operations must look. However, implementing and preserving these frameworks and standards at scale is impossible, without relentless automation. ![The Need for an Open Regulatory Blueprint ](https://www.finos.org/hubfs/Projects%20+%20SIGs/FINOS%20Common%20cloud%20controls%20(CCC)/FINOS%20CCC%20and%20the%20need%20for%20an%20open%20regulatory%20blueprint%20cover%20image.jpg) ▶ The Need for an Open Regulatory Blueprint On this panel, leaders from Citi, Google Cloud, and BMO will discuss updates on the recently open sourced FINOS CCC project, and the need for a set of open standards that describes consistent controls for compliant cloud deployments to alleviate cybersecurity threats, compliance costs, a fragmented regulatory landscape, cloud concentration, and more. ![The Need for an Open Source Public Cloud Standard](https://www.finos.org/hubfs/Projects%20+%20SIGs/FINOS%20Common%20cloud%20controls%20(CCC)/FINOS%20Common%20Cloud%20Controls%20the%20need%20for%20an%20open%20source%20financial%20services%20public%20cloud%20standard%20cover%20image.jpg) ▶ The Need for an Open Source Public Cloud Standard As the pace of cloud adoption accelerates in a highly fragmented global regulatory landscape, FINOS CCC aims to develop a unified set of cybersecurity, resiliency, and compliance controls for common services across the major cloud service providers. ![From CCC To Automated Cloud Detections and Remediations With Prowler and AI](https://www.finos.org/hubfs/OSFF%202025%20(Open%20Source%20in%20Finance%20Forum)/OSFF%20New%20York%20NYC%202025/OSFF%20NYC%202025%20Videos/Mutualizing%20Risk%20and%20Compliance%20in%20the%20Open/From%20CCC%20To%20Automated%20Cloud%20Detections%20and%20Remediations%20With%20Pro...%20Pedro%20Mart%C3%ADn%20%26%20Toni%20de%20la%20Fuente.jpg) ▶ From CCC To Automated Cloud Detections and Remediations With Prowler and AI In this hands-on workshop, you’ll learn how to bring Common Cloud Controls (CCC) to life through automation, using open source tools and AI. ![Cloud Controls are Out of Control](https://www.finos.org/hubfs/Projects%20+%20SIGs/FINOS%20Common%20cloud%20controls%20(CCC)/Cloud%20Controls%20are%20Out%20of%20Control%20Cover%20Image.jpg) ▶ Cloud Controls are Out of Control This talk delves into the evolution of public cloud controls, highlighting one bank's journey from open-source tools to contemporary Cloud Security Posture Management (CSPM) services, and exploring the pain points that remain. ![Building & Validating with Common Cloud Controls](https://www.finos.org/hubfs/Projects%20+%20SIGs/FINOS%20Common%20cloud%20controls%20(CCC)/Building%20%26%20Validating%20with%20Common%20Cloud%20Controls%20Cover%20Image.jpg) ▶ Building & Validating with Common Cloud Controls In this presentation we will witness the first public demonstration of value from CCC through partnership with its sister project: Compliant Financial Infrastructure (CFI). Show More --- ## FINOS CCC DOCUMENTS   [![PDF Preview](https://www.finos.org/hubfs/CC4AI%20Contributor%20Experience%20(1).jpg)](https://www.finos.org/hubfs/Projects%20+%20SIGs/Artificial%20Intelligence%20(AI)/CC4AI%20Contributor%20Experience%20(black).pdf?hsLang=ja-jp) Contributing to Common Controls for AI [![PDF Preview](https://www.finos.org/hubfs/Projects%20+%20SIGs/FINOS%20Common%20cloud%20controls%20(CCC)/FINOS-CCC-Primer-June-2024.png)](https://www.finos.org/hubfs/Projects%20+%20SIGs/FINOS%20Common%20cloud%20controls%20(CCC)/FINOS-CCC-Primer-June-2024-1.pdf?hsLang=ja-jp) Introducing FINOS CCC This is a short introduction to FINOS CCC ## Want to learn more about FINOS CCC or other FINOS Projects? [![FINOS Logo](https://www.finos.org/hs-fs/hubfs/sofin%20assets/SOFIN%20LOGOS/FINOS_Icon_Wordmark_White.png?width=689&height=971&name=FINOS_Icon_Wordmark_White.png "FINOS Logo")](https://www.finos.org/?hsLang=ja-jp) [![Twitter logo](https://finos.org/hubfs/2419532/FINOS/website/logos/social-logos/twitter-blue-social-panel.png)](https://twitter.com/finosfoundation) [![GitHub logo](https://finos.org/hubfs/2419532/FINOS/website/logos/social-logos/github-black-social-panel.png)](https://finos.github.io) [![LinkedIn logo](https://finos.org/hubfs/2419532/FINOS/website/logos/social-logos/linkedin-blue-social-panel.png)](https://www.linkedin.com/company/finosfoundation) [![SlideShare logo](https://finos.org/hubfs/2419532/FINOS/website/logos/social-logos/Homepage%20Social%20Panel/slideshare-logo.png)](https://www.slideshare.net/finosfoundation) [![YouTube logo](https://finos.org/hubfs/2419532/FINOS/website/logos/social-logos/Homepage%20Social%20Panel/youtube_logo-1.png)](https://www.youtube.com/channel/UCfJAdRALzJ7J7snubrb_Y-Q) [Contact Us](https://www.finos.org/contact-us?hsLang=ja-jp) [info@finos.org](mailto:info@finos.org) +1 (650) 665-9773 [Privacy |](https://www.finos.org/privacy-policy?hsLang=ja-jp)[Terms of Service |](https://www.finos.org/terms-of-service?hsLang=ja-jp)[Community Code of Conduct |](https://www.finos.org/code-of-conduct?hsLang=ja-jp)[Email Preferences](https://www.finos.org/hs/manage-preferences/unsubscribe-simple?hsLang=ja-jp)