Organizations who have the CSA Trusted
Cloud Provider trustmark demonstrate
a commitment to organizational security. They are
a CSA
Corporate Member, volunteer regularly for
CSA, and have at least one staff member who has
earned their CCSK.

A technology-neutral certification leveraging the requirements of the ISO/IEC 27001 management system standard together with the CSA Cloud Controls Matrix (CCM).

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Information about Amazon Web Services (AWS)
Listed Since: 11/07/2020
Last Updated: 12/16/2024
Listed Since: 11/07/2020
Last Updated: 12/16/2024
STAR Level 1
Self-Assessment & Partner-Provided
Cloud Controls Matrix

CAIQ Self-assessment v4.0.2
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
STAR Level 2
Third-Party Audit
Organizations looking for a third-party audit can choose from one or more of the security and privacy audits and certifications.
Cloud Controls Matrix

STAR Certification (CCMv4)
A technology-neutral certification leveraging the requirements of the ISO/IEC 27001 management system standard together with the CSA Cloud Controls Matrix (CCM).
