Cloud 101CircleEventsBlog
Register for CSA’s free Virtual Cloud Trust Summit to tackle enterprise challenges in cloud assurance.

STAR Registry Listing for

SASE, SD-WAN, CWS, SA

Founded in 2013 by the Cloud Security Alliance, the Security Trust Assurance and Risk (STAR) registry encompasses key principles of transparency, rigorous auditing, and cloud security and privacy best practices.

SASE, SD-WAN, CWS, SA Logo
SASE, SD-WAN, CWS, SA

SASE, SD-WAN, CWS, SA

Secure Access Service Edge (“SASE” or the “service offering”) is a Software-as-a-Service (“SaaS”) cloud networking and cloud security platform that allows for simplicity, scalability, and security. SASE couples network security functions with Wide Area Network (WAN) to deliver automated access to applications and workloads in the cloud by extending software-defined networking and security to Infrastructure-as-a-Service (“IaaS”) and SaaS providers. The service offering includes:

A Software-Defined Wide Area Network (SD-WAN) that decouples networking services from the underlying network to allow application traffic to be carried independently of the underlying components.

Cloud Web Security (CWS) service which provides a secure web gateway (SWG), and cloud access security broker (CASB)

Zero Trust Network Access (Secure Access / SA) utilizes identity-, location-, and context-based approach that “trusts no one,” granting authorized resources on-demand.

View other services by VMware, Inc.:

Organizations who have the CSA Trusted Cloud Provider seal demonstrate a commitment to organizational security. They are a CSA Corporate Member volunteer regularly for CSA, and have at least one staff member who has earned their CCSK.
Information about SASE, SD-WAN, CWS, SA
Listed Since: 09/09/2022
Last Updated: 09/29/2023

STAR Level 1

Self-Assessment & Partner-Provided

Consensus Assessments Initiative Questionnaire v4.0.2

CAIQ 4.0.2 Self-assessment
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No questions a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the CSA Cloud Controls Matrix (CCM).