Standardizing Security in Diverse Sectors: A Template for STAR-Aligned Sector-Specific Standards
Released: 03/06/2024
The CSA Security, Trust, Assurance, and Risk (STAR) program encompasses the key principles of transparency, rigorous auditing, and harmonization of cybersecurity standards outlined in the Cloud Controls Matrix (CCM). This document provides a template for developing sector-specific requirements for CSA STAR and the related base standard (ISO/IEC 27001). Sector-specific requirements will help to extend the CSA STAR program and ensure consistency, effectiveness, and efficiency in auditing across all sectors.
The template includes:
- Introduction
- Scope
- Normative references
- Specific references related to CSA STAR and ISO/IEC 27001
- Examples of integrating the CSA STAR program into an audit
Topics:
