STAR Program Knowledge Guide 20241112信息安全资料 .docxVIP

STARProgramKnowledgeGuide

AHolisticLookatCSA’sSecurity,Trust,Assurance,andRiskProgram

THECSASTARUNIVERSE

STARExtended

CloudControlsMatrix

STARAssessmentPortfolio

STAREnabledSolutions

AssuranceEducation

STARRegistry

2 ?Copyright2024,CloudSecurityAlliance.Allrightsreserved. ?Copyright2024,CloudSecurityAlliance.Allrightsreserved. 3

IntroductiontotheSTARProgram

Whatisassuranceincybersecurity?Assuranceisameasureofconfidencethataninformationsystem’ssecurityfeatures,practices,procedures,andarchitectureaccuratelyenforce

thesecuritypolicy.TheSecurity,Trust,Assurance,andRisk

(STAR)programistheworld’slargestandmostcompletecloudassuranceprogram.CSAcreatedittoimprovethesecurity

andtrustofcloudcomputingbydeliveringbestpracticesviaassurance,education,andtechnology.

TheSTARprogramisbasedontheprinciplesestablishedintheCloudControlsMatrix(CCM),aframeworkofcloudsecuritycontrols(policies,procedures,andtechnicalmeasures)derivedfromindustrybestpractices.Theotherfacets(pillars)oftheSTARprogramarebuiltuponCCM:

BackgroundontheSTARProgram

AssuranceasaCriticalAspectoftheCybersecurityIndustry

Intheever-evolvinglandscapeofcybersecurity,assurancestandsasacornerstone,ensuringthatsecuritymeasuresarenotjustpresentbutarerobustandeffective.Assuranceincybersecurityisakintoasealoftrust.It’snotjustaboutimplementingsecurityprotocols;it’saboutverifyingtheireffectivenessandresilienceagainstemergingthreats.

Itisimportanttoemphasizethattheneedforassurancegrowsasthedependencyoncybertechnologiesincreasesandthethreatsbecomemoresophisticatedandindustrialized.Itprovidesorganizationsacriticallayerofconfidence,ensuringtheirdefensesarenotjusttheoretical,butpracticalandtested.Thisaspectofcybersecurityisessentialformaintainingtheconfide