STAR Level 1: Security Questionnaire (CAIQ v4)
Release Date: 06/07/2021
Working Group: Consensus Assessments
The STAR Level 1: Security Questionnaire (CAIQ v4) offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services, providing security control transparency. It provides a set of Yes/No questions a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM). Therefore, it helps cloud customers to gauge the security posture of prospective cloud service providers and determine if their cloud services are suitably secure.
The STAR Level 1: Security Questionnaire (CAIQ v4) is what individuals will need to use to submit to the STAR Registry, and includes all the necessary features of CAIQ v4. You can read more about the updates made to CAIQ v4 in this blog here.