Organizations who have the CSA Trusted
Cloud Provider trustmark demonstrate
a commitment to organizational security. They are
a CSA
Corporate Member, volunteer regularly for
CSA, and have at least one staff member who has
earned their CCSK.

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Information about Tenable.io
Listed Since: 05/20/2018
Last Updated: 09/04/2025
Listed Since: 05/20/2018
Last Updated: 09/04/2025
STAR Level 1
Self-Assessment & Partner-Provided
Cloud Controls Matrix

CAIQ Self-assessment v4.0.3
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
.png)