STAR Registry Listing for
O4IT

A technology-neutral certification leveraging the requirements of the ISO/IEC 27001 management system standard together with the CSA Cloud Controls Matrix (CCM).

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No questions a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the CSA Cloud Controls Matrix (CCM).
Information about O4IT
Listed Since: 02/13/2015
Last Updated: 04/29/2022
Listed Since: 02/13/2015
Last Updated: 04/29/2022
STAR Level 1
Self-Assessment & Partner-Provided
Cloud Controls Matrix

CAIQ Self-assessment v3.1
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No questions a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the CSA Cloud Controls Matrix (CCM).
(Deprecated)
Deprecated assessments do not necessarily indicate
non-compliance. In this case, the self-assessment
has not been updated in more than one year. We suggest
contacting this organization directly to request that
they submit an updated self-assessment.
STAR Level 2
Third-Party Audit
Organizations looking for a third-party audit can choose from one or more of the security and privacy audits and certifications.
Cloud Controls Matrix

STAR Certification (CCM v3)
A technology-neutral certification leveraging the requirements of the ISO/IEC 27001 management system standard together with the CSA Cloud Controls Matrix (CCM).
(Deprecated)
Deprecated assessments do not necessarily indicate
non-compliance. In this case, the self-assessment
has not been updated in more than one year. We suggest
contacting this organization directly to request that
they submit an updated self-assessment.