Cloud adoption across financial services continues to accelerate, but inconsistent security controls, fragmented regulatory expectations, and cloud-vendor lock-in are major obstacles to secure, compliant, multi-cloud operations. FINOS Common Cloud Controls (CCC) is an open standard developed collaboratively with financial institutions, cloud providers, and vendors that defines a unified taxonomy, threat model, and machine-verifiable control catalog for cloud services.

Deep dive on the components of CCC plus understanding of the implementations of validators and conformant implementations. These will be demoed during Maxime and Eddie's talk at OSFF Toronto, but this will be a deeper dive for people to learn how to use the software and contribute improvements.