CSA Star Certification
About
Elevate Your Cloud Security Posture
CSA STAR is the trusted program to position your organization as a trusted Cloud provider while improving your security maturity using best practices.
The Cloud Security Alliance (CSA) helps define the best practices for a secure cloud environment. CSA developed and operates the CSA Security, Trust, Assurance & Risk (STAR) Registry Program, widely known for its key principles: “transparency, rigorous auditing, and harmonization of standards”. Organizations who hold the CSA STAR Certification or Attestation are a sign of best practices for their cloud offerings.
CSP’s Can Choose to Perform Certification or Attestation
Certification
- CSA STAR Certificates are issued for a period of 3 years and it is required that an ISO/IEC 27001 Certification be current when issuing a CSA STAR Certification.
- The certification process follows the same protocol as ISO/IEC 27001. Thus ‘a point in time’ audit.
Attestation
- The STAR Attestation is an independent, third-party assessment of the security of a CSP that leverages the requirements of the SOC 2 framework (based on the AICPA Trust Services Principles (TSP)) in conjunction with the CCM. By pursuing the STAR Attestation, it allows organizations to demonstrate the suitability of the design and operating effectiveness of their controls over a period of time, rather than at a point in time.
What We Do
- Perform the Gap Analysis
- Provide recommendations and assist with implementation to increase the scoring
- Perform remediation activities (from policy development to technical configuration advisory)
- Be Your ‘Go To’ security trusted advisor to improve your contract environment