CSA STAR Resources

Home
Resources

Browse Resources

Code of Practice for Implementing STAR Level 2

Code of Practice for Implementing STAR Level 2
Release Date: 06/23/2021

This Code of Practice shows how you can apply the CCM control set in your organization to reach STAR Level 2 third party certification/attestation and als...

Request to download
Cloud Controls Matrix and CAIQ v4

Cloud Controls Matrix and CAIQ v4
Release Date: 06/07/2021

The Cloud Controls Matrix (CCM) is a cybersecurity control framework for cloud computing aligned to the CSA best practices, that is considered the de-facto s...

Request to download
STAR Level 1: Security Questionnaire (CAIQ v4)

STAR Level 1: Security Questionnaire (CAIQ v4)
Release Date: 06/07/2021

The STAR Level 1: Security Questionnaire (CAIQ v4) offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services,...

Request to download
Guidelines for CPAs Providing CSA STAR Attestation v3

Guidelines for CPAs Providing CSA STAR Attestation v3
Release Date: 05/27/2021

This document provides guidance for CPAs in conducting a STAR Attestation. It includes relevant information including: professional requirements, competency ...

Request to download
STAR Enabled Solution | CAIQ-Lite

STAR Enabled Solution | CAIQ-Lite
Release Date: 05/05/2021

CSA and Whistic identified the need for a lighter-weight assessment questionnaire in order to accommodate the shift to cloud procurement models, and to enabl...

Request to download
STAR Enabled Solution | CSA - OneTrust VRM Tool

STAR Enabled Solution | CSA - OneTrust VRM Tool
Release Date: 05/05/2021

The CSA-OneTrust Vendor Risk Management (VRM) tool automates the entire vendor management lifecycle, including onboarding and offboarding vendors, triaging v...

Request to download
CSA STAR Level 3 Focus Group Charter

CSA STAR Level 3 Focus Group Charter
Release Date: 04/02/2021

The CSA STAR Level 3 Focus Group  will advise on the scope, objectives, structure, go-to-market (GTM) strategy and value proposition for STAR Level 3. Thi...

Request to download
Requirements for Bodies Providing STAR Certification

Requirements for Bodies Providing STAR Certification
Release Date: 12/05/2020

This document outlines how to conduct a STAR certification assessments to the Cloud Controls Matrix (CCM) as part of an ISO 27001 assessment.

Request to download

STAR Certification Guidance Document: Auditing the Cloud Controls Matrix (CCM)
Release Date: 08/05/2020

There are a number of control areas on the CCM that will each be awarded a management capability score on a scale of 1-15. This 2nd version release includes ...

Request to download

Value of STAR for Cloud Customers - Letter Template
Release Date: 04/16/2020

Use this letter template to help explain why your organization decided to use STAR to minimize multiple customer questionnaires and increase transparency. Th...

Request to download
Consensus Assessment Initiative Questionnaire (CAIQ) v3.1

Consensus Assessment Initiative Questionnaire (CAIQ) v3.1
Release Date: 04/01/2020

Cloud Security Alliance (CSA) would like to present the next version of the Consensus Assessments Initiative Questionnaire (CAIQ) v3.1. The CAIQ offers an ...

Request to download

PLA Code of Conduct (CoC): Statement of Adherence Self-Assessment
Release Date: 11/19/2019

CSA PLA Code of Conduct for GDPR Compliance provides a consistent and comprehensive framework for complying with the EU’s GDPR. The CSA PLA Code of Conduct f...

Request to download

Guidance for submitting the CSA Code of Conduct (CoC) for GDPR Compliance Self-Assessment
Release Date: 11/19/2019

The CSA CoC for GDPR Compliance Self-Assessment is the voluntary publication of a CSP’s self-assessment results based on the requirements specified in the PL...

Request to download

Transition to CAIQ v3.1
Release Date: 10/31/2019

This is a CSA Global Technical Notification with regard to the release of the new version of the Consensus Assessments Initiative Questionnaire (CAIQ) v3.1. ...

Request to download
STAR Level and Scheme Requirements

STAR Level and Scheme Requirements
Release Date: 09/04/2019

Find out about each level of the CSA Security Trust, Assurance and Risk (STAR) program. STAR is the industry’s most powerful program for security assurance i...

Request to download
Cloud Controls Matrix v3.0.1

Cloud Controls Matrix v3.0.1
Release Date: 08/03/2019

The CCM, the only meta-framework of cloud-specific security controls, mapped to leading standards, best practices and regulations. CCM provides organizations...

Request to download
STAR Continuous Technical Guidance

STAR Continuous Technical Guidance
Release Date: 02/27/2019

STAR Continuous specifies the necessary activities and conditions for the continuous auditing of the cloud service over a defined set of security requirement...

Request to download

STAR Provider Verification Template
Release Date: 07/16/2018

If you don’t already see your provider listed on the STAR registry submit a request to have them verified. Download this letter template and send it to your ...

Request to download
CSA STAR Program & Open Certification Framework in 2016 and Beyond

CSA STAR Program & Open Certification Framework in 2016 and Beyond
Release Date: 04/12/2016

The Cloud Security Alliance (CSA) Security, Trust and Assurance Registry (STAR) program is the industry’s leading trust mark for cloud security. The CSA Open...

Request to download