ChaptersEventsBlog

CSA STAR Resources

Home
Resources

Browse Resources

STAR Attestation Value Proposition

STAR Attestation Value Proposition

Release Date: 10/03/2023

Request to download
CCM Lite & CAIQ Lite FAQ

CCM Lite & CAIQ Lite FAQ

Release Date: 09/25/2023

The Cloud Controls Matrix (CCM) is a globally recognized framework of 197 controls (policies, procedures, and technical measures) that are crucial for clo...

Request to download
Guidelines for CPAs Providing CSA STAR Attestation v4

Guidelines for CPAs Providing CSA STAR Attestation v4

Release Date: 09/07/2023

This document provides guidance for CPAs in conducting a STAR Attestation. It includes relevant information including professional requirements, competenc...

Request to download
CSA Assurance Education FAQ

CSA Assurance Education FAQ

Release Date: 08/22/2023

Assurance education encompasses training and certification programs that teach individuals how to determine the effectiveness of the cybersecurity practic...

Request to download
STAR Assessment Portfolio FAQ

STAR Assessment Portfolio FAQ

Release Date: 08/22/2023

The STAR Assessment Portfolio is a collection of globally-recognized cloud security and privacy assessments that can be completed by cloud service provide...

Request to download
STAR Registry FAQ

STAR Registry FAQ

Release Date: 05/05/2023

The STAR Registry is a globally recognized and publicly accessible repository of over 2,000 service assessments filled out by cloud service providers (CSP...

Request to download
Value of STAR Level 2 for Cloud Customers - Letter Template

Value of STAR Level 2 for Cloud Customers - Letter Template

Release Date: 03/09/2023

Use this letter template to explain to a customer why your organization decided to use STAR Level 2 Certification or Attestation to minimize multiple cust...

Request to download
STAR Enabled Solutions FAQ

STAR Enabled Solutions FAQ

Release Date: 02/01/2023

A STAR Enabled Solution is a product or service that utilizes the CCM framework or the Consensus Assessment Initiative Questionnaire (CAIQ). Their technol...

Request to download
Deconstructing Application Connectivity Challenges in a Complex Cloud Environment

Deconstructing Application Connectivity Challenges in a Complex Cloud Environment

Release Date: 12/14/2022

The production and use of SaaS applications in organizations has grown exponentially over the past several years. Application Security has become an integ...

Request to download
CSA CCM v4.0 Addendum - ISMAP

CSA CCM v4.0 Addendum - ISMAP

Release Date: 10/04/2022

This document is an addendum to the CCM V4.0 that contain controls mapping between the CSA CCM and Japan's Information System Security Management and Asse...

Request to download
Accedere: Using a SOC 2 Approach to Help Organizations Achieve CSA STAR Level 2

Accedere: Using a SOC 2 Approach to Help Organizations Achieve CSA STAR Level 2

Release Date: 09/19/2022

Cybersecurity frameworks, standards and certifications can be quite complicated to understand, making it difficult to identify which standard an organizat...

Request to download
Flowchart for Becoming a CSA STAR Accredited Assessment Firm

Flowchart for Becoming a CSA STAR Accredited Assessment Firm

Release Date: 09/13/2022

Download this flowchart to see the steps needed to become a CSA STAR Accredited Assessment Firm.

Request to download
Case Study: Integrating Third-Party Assessments and Regulations with CSA STAR and TokenEx

Case Study: Integrating Third-Party Assessments and Regulations with CSA STAR and TokenEx

Release Date: 03/23/2022

TokenEx is a leading data protection and tokenization platform, founded in 2010. They have completed the CSA STAR Level 1: Security Self-Assessment, docum...

Request to download
How to Submit to CSA STAR

How to Submit to CSA STAR

Release Date: 03/21/2022

Download this graph for an overview of the steps your organization will need to take to submit to the CSA STAR registry for both level 1 and level 2. 

Request to download
The Importance of STAR

The Importance of STAR

Release Date: 03/17/2022

Compliance requires a comprehensive review of services and processes related to cloud infrastructure and how it is managed during a data lifecycle. STAR f...

Request to download
STAR Level 1: Security Questionnaire (CAIQ v4) - Japanese Translation

STAR Level 1: Security Questionnaire (CAIQ v4) - Japanese Translation

Release Date: 11/02/2021

This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate...

Request to download
CCM and CAIQ v4 - Chinese Translations

CCM and CAIQ v4 - Chinese Translations

Release Date: 10/26/2021

This localized version of this publication was produced from the original source material (CCM, CAIQ) through the efforts of local organizations and the C...

Request to download
CCM and CAIQ v4 -Japanese Translations

CCM and CAIQ v4 -Japanese Translations

Release Date: 10/26/2021

This localized version of this publication was produced from the original source material (CCM, CAIQ) through the efforts of chapters and volunteers but t...

Request to download
CCM v4 - Spanish Translation

CCM v4 - Spanish Translation

Release Date: 10/26/2021

This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate...

Request to download
CCM v4 Chinese Translation

CCM v4 Chinese Translation

Release Date: 10/26/2021

This localized version of this publication was produced from the original source material (CCM, CAIQ) through the efforts of local organizations and the C...

Request to download