CSA STAR Registry
Security, Trust, Assurance, and Risk Registry
{{ record.name }}
{{ record.description | truncate(160) }}
Listed Since: {{ formatedDate(record.listed_since) }}
Submissions:
Submissions:
{{ record.name }}
{{ record.description | truncate(160) }}
Listed Since: {{ formatedDate(record.listed_since) }}
Submissions: {{ submissionType }} Offers an industry-accepted way to
document what security controls exist in
IaaS, PaaS, and SaaS services. It
provides a set of Yes/No questions a
cloud consumer and cloud auditor may
wish to ask of a cloud provider to
ascertain their compliance to the Cloud Controls Matrix.{{ submissionType }} A controls framework aligned
to the CSA Security Guidance for Cloud Computing that is considered a de-facto
standard for cloud security
assurance and compliance.{{ submissionType }} Organizations who have a
continuous self-assessment submit
an updated CAIQ every month.GDPR Code of Conduct Provides a consistent and
comprehensive framework for complying
with the EU’s GDPR. {{ submissionType }}
Submissions: {{ submissionType }} A technology-neutral certification
leveraging the requirements of the
ISO/IEC 27001:2013 management system
standard together with the CSA Cloud Controls Matrix.{{ submissionType }} Provides guidelines for CPAs to
conduct SOC 2 engagements using
criteria from the AICPA (Trust Service
Principles, AT 101) and the CSA Cloud Controls Matrix.{{ submissionType }} A certification for the Greater
China market that harmonizes CSA best
practices with Chinese national
standards.{{ submissionType }}