STAR Program Overview信息安全资料 .docxVIP

STARProgramOverview

TheWorld’sPremierCloudAssuranceProgram

TheCSASecurity,Trust,Assurance,andRisk(STAR)programisthemostcompleteandlargestcloudassuranceprogramintheworldthatconstitutesanecosystemofthebestpractices,standards,technology,andauditingandconsultingpartners.Launchedin2011,STAR’smissionistoimprovethesecurityandtrustofcloudcomputingbydeliveringbestpracticesviaassurance,education,andtechnology.

WhySTARisEssential

Bothenterprisecloudcustomersandcloudserviceprovidersareexperiencingatremendousamountofpressureduetotheacceleratedgrowthandadoptionofcloudcomputing.Cloudcustomersarelookingtorapidlyonboardandensurethesecurityofthethousandsofcloudservicesthatthey

use.Atthesametime,cloudproviderswanttoprovethesecurityoftheirproductstomillionsofcustomers.Toeasethesepressures,theindustryrequiresacloudsecurityassuranceprogramthatisstandards-based,recognizedglobally,abletoquicklyadapttochangesintheindustry,andsupportedbyexperiencedpartners.TheSTARprogramistheholisticsolutionthatanswerstheseneedsforcustomersandcloudserviceprovidersalike.

?Copyright2023,CloudSecurityAlliance.Allrightsreserved. 1

PillarsofSTAR

TheCSASTARprogramiscomprisedofthefollowingsixpillarsthatprovidearichsetofcapabilitiestopromoteahighstandardofassuranceforthecloudage:

CloudControlsMatrix

ThefoundationofCSASTAR,theCloud

ControlsMatrix(CCM)isCSA’sframeworkof

AssuranceEducation

TheSTARprogramofferstwoprofessionalcertificateswithassociatedtraining:

cloud-nativecontrolobjectivesandisusedandmappedpervasivelythroughouttheindustry.

AtoolderivedfromCCMistheConsensus

AssessmentInitiativeQuestionnaire(CAIQ),themostcommonwaytoassessCCMcontrolobjectivesincloudproviderenvironments.

STARAssessmentPortfolio

? TheCertificateofC