STAR Enabled Solutions FAQ - 020123信息安全资料 .docxVIP

STAREnabledSolutionsFAQ

Technologiesthatenableamodernapproachtocloudsecurityassurance

WhatisSTAR?

CSA’sSecurity,Trust,AssuranceandRisk(STAR),theworld’sforemostcloudassuranceprogram,isdesignedtoincreasetransparencyandbuildtrustincloudcomputing.Itassessesacloudservice

provider’s(CSP)andcloudservicessecuritypostureagainsttheCloudControlsMatrix(CCM)requirements.TheSTARprogramconstitutesanecosystemofthebestpractices,standards,technologiesandauditingpartners.Itsupportsorganizationstoeffectivelyandefficientlyaddresshowtodefinetrustinthecloud,fosteraccountability,evaluaterisk,measureassuranceandsimplifycomplianceandprocurement.

WhatistheSTARRegistry?

TheSTARprogramconstitutesanecosystemofthebestpractices,standards,technologiesandauditingpartners.

TheSTARRegistryisapubliclyaccessibleregistrythatdocumentsthesecurityandprivacycontrolsputinplacebypopularcloudcomputingofferings,allowingorganizationstoshowcurrentandpotentialcustomerstheirsecurityandcomplianceposture,includingtheregulations,standards,andframeworkstheyadhereto.

WhatisaSTAREnabledSolution?

ASTAREnabledSolutionisaproductorservicethatutilizestheCCMframeworkortheConsensusAssessmentInitiativeQuestionnaire(CAIQ).TheirtechnologiesandtoolshavebeenassessedandfoundtomeetthesecurityrequirementsoutlinedbyCSA.ThisvettingprocessallowsenterprisestomoreeasilydeploytoolsthatalignorcomplywithSTAR,theCCMframework,andbestpractices.

?Copyright2023,CloudSecurityAlliance.Allrightsreserved. 1

WhyareSTAREnabledSolutionsimportant?

STAREnabledSolutionsprovidetechnologiesthatenableamodernapproachtocloudsecurityassurance.Theyserveto:

? SimplifyalignmenttoCCMcontrolsforbothcloudservicecustomers(CSCs)andcloudserviceproviders(CSPs)

? Automatethevalidationofacloudsecu