Download Publication
Requirements for Bodies Providing STAR Certification
Release Date: 03/31/2025
Updated On: 07/18/2025
Working Group: Open Certification Framework
This document outlines how to conduct STAR certification assessments to the Cloud Controls Matrix (CCM) as part of an ISO 27001 assessment. The STAR certification process is not meant to be a replacement for any ISO/IEC 27001 certification processes but as a supplement or extension of those processes.
This document:
This document:
- Outlines the requirements Certifying Bodies (CBs) must meet in order to conduct a STAR certification assessment to the Cloud Controls Matrix (CCM) as part of an ISO/IEC 27001 assessment
- Describes the controls set out in the CCM that can be considered additional controls in ISO/IEC 27001.
- Should be considered as supplementary to ISO/IEC 27006 and serves to outline the additional requirements for the assessment of the CCM.
Download this Resource
Prefer to access this resource without an account? Download it now.
Share
Related resources
Related Resources
.jpeg)
Are you a research volunteer? Request to have your profile displayed on the website here.
Interested in helping develop research with CSA?
Related Certificates & Training
Learn the core concepts, best practices and recommendation for securing an organization on the cloud regardless of the provider or platform. Covering all 14 domains from the CSA Security Guidance v4, recommendations from ENISA, and the Cloud Controls Matrix, you will come away understanding how to leverage information from CSA's vendor-neutral research to keep data secure on the cloud.
Learn more
Learn more