Cloud 101CircleEventsBlog
Download Presentations from the CSA AI Summit at RSAC Now

STAR Registry Listing for

Enterprise Cloud

Founded in 2013 by the Cloud Security Alliance, the Security Trust Assurance and Risk (STAR) registry encompasses key principles of transparency, rigorous auditing, and cloud security and privacy best practices.

Enterprise Cloud

Expedient Enterprise Cloud infrastructure as a service (IaaS) offers a single pane of glass management interface with self-service network provisioning, intuitive monitoring and analytics, and self-service multi-tenancy for computing management that enables a policy-driven approach ensuring control. The service is a scalable VMware software-defined data center (SDDC) offering operational consistency between on-premises workloads and the cloud offered in three models:

  • Public Cloud – maximum cost effectiveness through shared infrastructure.
  • Private Cloud – maximum segmentation for challenging compliance requirements through dedicated infrastructure.
  • On-Site Private Cloud – an Expedient private cloud at any qualified location to meet data residency and latency requirements.
  • Hybrid Cloud – Combines physical infrastructure from one of Expedient’s data centers with our public and private cloud solutions, or combines physical infrastructure with third-party clouds, such as AWS.
  • Enterprise Workspace – highly available virtual desktop infrastructure-as-a-service built on Expedient’s VMWare Cloud services.
  • Expedient Edge – an end-to-end compute platform built to run workloads at Edge locations on redundant hardware and remote management with support provided by Expedient.

Clients choose the delivery model(s) most appropriate for their workloads. Expedient data centers support the Expedient Enterprise Cloud and a variety of complementary managed services. Partner data centers and client locations may also be used where applicable.

Information about Enterprise Cloud
Listed Since: 10/15/2019
Last Updated: 02/02/2024

STAR Level 1

Self-Assessment & Partner-Provided

Consensus Assessments Initiative Questionnaire v4.0.3

CAIQ 4.0.3 Self-assessment
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No questions a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the CSA Cloud Controls Matrix (CCM).