STAR Registry FAQ信息安全资料 .docxVIP

STARRegistryFAQ

Theonlyplaceyouneedtogoforcloudsecuritytransparency

TheCSASecurity,Trust,Assurance,andRisk(STAR)programisthelargestcloudassuranceprogramintheworldthatconstitutesanecosystemofthebestpractices,standards,technology,andauditingpartners.STARsupportsorganizationstoeffectively

andefficientlyaddresshowtodefinetrustinthecloud,fosteraccountability,evaluaterisk,measureassurance,andsimplifycomplianceandprocurement.TheSTARRegistryistheprimaryserviceofferedbytheSTARprogram.

Whatisit?

TheSTARRegistryisagloballyrecognizedandpubliclyaccessiblerepositoryofover2,000serviceassessmentsfilledoutbycloudserviceproviders(CSPs).Theseassessmentsdocumentthesecurity,privacy,andgovernancepoliciesofthecloudservicesofferedbytheCSPs.CloudcustomerscanusetheSTARRegistrytofindacloudservicewiththerightlevelofsecurityanddataprivacyfortheirorganization.

Whyisitimportant?

TheSTARRegistrybenefitsbothCSPsandtheircurrentandprospectivecustomers.It:

? Servesasamarketdifferentiator,allowingCSPstodemonstratetheirvaluesoftransparency,accountability,andtop-tiersecurity.

? ProvideseasilyaccessibleinformationonCSPs’securitycommitmentsandcapabilities,allowingcurrentcustomerstoconfirmthecontinuedcomplianceoftheirCSP.

? Streamlinesthecloudserviceselectionandprocurementprocessesforpotentialcloudcustomersbyprovidingasinglelistofthousandsofservicesalignedwithindustrybestpractices.

? AllowstransparencyoftheexpectedsharedsecurityresponsibilitiesbetweenCSPsandcloudcustomers.

? EliminatestheneedforCSPstocompletemultiplecustomersquestionnaires.CSPscan

?Copyright2023,CloudSecurityAlliance.Allrightsreserved. 1

pointstakeholderstotheRegistryforthelatestinformation,ratherthanfillingoutauniquequestionnaireforeachstakeholder.

Howdoyouuseit?

Vis