STAR | CSA

<!DOCTYPE html><html><head><title>STAR | CSA</title> <meta name="description" content="The Security Trust Assurance and Risk (STAR) Program encompasses key principles of transparency, rigorous auditing, and harmonization of standards. Companies who use STAR indicate best practices and validate the security posture of their cloud offerings."> <link rel="canonical" href="https://cloudsecurityalliance.org/star"> <link rel="image_src" href="/assets/social-share/facebook-429f9d45f1c2afbf16c63ff940668c3dfc1e7ed3f9155f98eab6691bf6b5fd82.jpg"> <meta property="og:locale" content="en"> <meta property="og:type" content="website"> <meta property="og:title" content="STAR | CSA"> <meta property="og:description" content="The Security Trust Assurance and Risk (STAR) Program encompasses key principles of transparency, rigorous auditing, and harmonization of standards. Companies who use STAR indicate best practices and validate the security posture of their cloud offerings."> <meta property="og:url" content="https://cloudsecurityalliance.org/star"> <meta property="og:site_name" content="CSA"> <meta property="og:image" content="/assets/social-share/facebook-429f9d45f1c2afbf16c63ff940668c3dfc1e7ed3f9155f98eab6691bf6b5fd82.jpg"> <meta name="twitter:card" content="summary"> <meta name="twitter:title" content="STAR | CSA"> <meta name="twitter:description" content="The Security Trust Assurance and Risk (STAR) Program encompasses key principles of transparency, rigorous auditing, and harmonization of standards. Companies who use STAR indicate best practices and validate the security posture of their cloud offerings."> <meta name="twitter:site" content="@cloudsa"> <meta name="twitter:site_name" content="CSA"> <meta name="twitter:creator" content="@cloudsa"> <meta name="twitter:image" content="/assets/social-share/facebook-429f9d45f1c2afbf16c63ff940668c3dfc1e7ed3f9155f98eab6691bf6b5fd82.jpg"><meta name="csrf-param" content="authenticity_token" /> <meta name="csrf-token" content="_ZBqoK6pWrlnTexXGQYONI-f-An2NrJhiMqW_QioR80sdca-4eYKoHuW8b7L8jyGSGYHHeadJHngG5lNbIjBxQ" /><meta name="csp-nonce" /><meta content="text/html;charset=utf-8" http-equiv="Content-type" /><meta content="width=device-width, initial-scale=1" name="viewport" /><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/favicon/favicon.ico" rel="Shortcut Icon" type="image/x-icon" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/iphone.png" rel="apple-touch-icon" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-57x57.png" rel="apple-touch-icon" sizes="57x57" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-60x60.png" rel="apple-touch-icon" sizes="60x60" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-72x72.png" rel="apple-touch-icon" sizes="72x72" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-76x76.png" rel="apple-touch-icon" sizes="76x76" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-114x114.png" rel="apple-touch-icon" sizes="114x114" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-120x120.png" rel="apple-touch-icon" sizes="120x120" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-144x144.png" rel="apple-touch-icon" sizes="144x144" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-152x152.png" rel="apple-touch-icon" sizes="152x152" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/apple-touch-icons/apple-touch-icon-180x180.png" rel="apple-touch-icon" sizes="180x180" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/favicon/favicon-16x16.png" rel="icon" sizes="16x16" type="image/png" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/favicon/favicon-32x32.png" rel="icon" sizes="32x32" type="image/png" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/favicon/favicon-96x96.png" rel="icon" sizes="96x96" type="image/png" /><link href="https://assets.cloudsecurityalliance.org/legacy/local-cdn/global/site/android-chrome-icons/android-chrome-192x192.png" rel="icon" sizes="192x192" type="image/png" /><link rel="stylesheet" href="/assets/application-05bb97dee3bde9273f3ea4ad89383d77da30c6ea8d3bcd824987c3524b12507b.css" data-turbolinks-track="reload" /><link href="https://fonts.googleapis.com/css?family=Open+Sans%3A300italic%2C400italic%2C600italic%2C700italic%2C800italic%2C400%2C300%2C600%2C700%2C800&amp;#038;ver=1.0" media="all" rel="stylesheet" type="text/css" /><link href="https://fonts.googleapis.com/css?family=Titillium+Web%3A400%2C600&amp;#038;ver=1.0" media="all" rel="stylesheet" type="text/css" /><link href="https://use.typekit.net/tpr8qgx.css" rel="stylesheet" /><script>window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('consent', 'default', { 'ad_storage': 'denied', 'ad_user_data': 'denied', 'ad_personalization': 'denied', 'analytics_storage': 'denied', }); window.gtag = gtag;</script><script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({"gtm.start": new Date().getTime(),event:"gtm.js"});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!="dataLayer"?"&l="+l:"";j.async=true;j.src= "https://www.googletagmanager.com/gtm.js?id=" +i+dl;f.parentNode.insertBefore(j,f); })(window,document,"script","dataLayer",'GTM-WGMWDNB');</script><script src="/assets/application-ba4225ec596eebba3745394b97bb2fd7e5bcbe822dfa1440400acee76232d3fd.js" data-turbo-track="reload"></script><script async="" defer="" src="https://www.google.com/recaptcha/api.js?render=explicit"></script><script>window.addEventListener("turbo:before-render", function () { window.zEACLoaded = undefined; // this is the "hidden" global var that zendesk uses to check if it's loaded its widget yet });</script></head><body class="csa"> <noscript> <iframe src="https://www.googletagmanager.com/ns.html?id=GTM-WGMWDNB" height="0" width="0" style="display:none;visibility:hidden"> </iframe> </noscript>  <style>.callout-banner { text-align: center; position: relative; font-weight: 300; font-size: 12px; } @media screen and (max-width: 1110px) { .callout-banner { margin-top: 40px; } }</style><style>.app_notification a { color: white !important; text-decoration: underline; }</style><header class="csa-c-layout-header"><div class="o-area" id="quicklinks"><div class="c-quicklinks"><div class="o-container"><a class="c-quicklink" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"quick_links_menu","event_label":"Cloud 101 - https://cloudsecurityalliance.org/cloud-newbie"});" href="https://cloudsecurityalliance.org/cloud-newbie">Cloud 101</a><a class="c-quicklink" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"quick_links_menu","event_label":"Circle - https://circle.cloudsecurityalliance.org/"});" rel="noopener" target="_blank" href="https://circle.cloudsecurityalliance.org/">Circle</a><a class="c-quicklink" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"quick_links_menu","event_label":"Events - https://cloudsecurityalliance.org/events/"});" href="https://cloudsecurityalliance.org/events/">Events</a><a class="c-quicklink" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"quick_links_menu","event_label":"Blog - https://cloudsecurityalliance.org/blog/"});" href="https://cloudsecurityalliance.org/blog/">Blog</a><form class="c-quicklink" method="post" action="/auth/auth0"><button style="text-transform: uppercase;" data-turbo="false" type="submit">Sign in or Sign Up</button><input type="hidden" name="authenticity_token" value="lC6RLCRkAeDy8-HgWipAUBsj2Te6tc7DlL1JdpAuVaCxyYx4ot1tW1So2Xa6AcxpKS-i56kjCffhls2IYbmKjg" autocomplete="off" /></form></div></div></div><div id="megamenu"><div class="c-megamenu"><div class="o-container"><div class="o-grid"><a class="c-megamenu__logo o-grid__cell o-grid__cell--width-15@xsmall" href="/"><img src="/assets/CSA-logo-RGB-a0a3855889ad836fa585d60f6caf8d619f241d43904c304c2f64284127fe9bf3.svg" /></a><div class="c-megamenu__categories o-grid__cell o-grid__cell--width-75@xsmall"><div class="c-megamenu__category" data-target="#membership-nav"><div class="c-megamenu__anchor">Membership</div><div class="c-megamenu__category-content" id="membership-nav"><div class="o-container"><div class="o-grid o-grid--small-fit o-grid--medium-fit o-grid--large-fit"><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Membership Benefits - /membership/"});" href="/membership/">Membership Benefits</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Our Member Community - /membership/current/"});" href="/membership/current/">Our Member Community</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Get Involved - /membership/get-involved/"});" href="/membership/get-involved/">Get Involved</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Become a Member - /membership/contact/"});" href="/membership/contact/">Become a Member</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Member-Exclusive Programs</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Enabled Solutions - /star/registry/star-enabled-solutions/"});" href="/star/registry/star-enabled-solutions/">STAR Enabled Solutions</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Trusted Cloud Consultant - /trusted-cloud-consultant/registry/"});" href="/trusted-cloud-consultant/registry/">Trusted Cloud Consultant</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Trusted Cloud Provider - /trusted-cloud-provider/"});" href="/trusted-cloud-provider/">Trusted Cloud Provider</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certified STAR Auditors - /star/certified-star-auditors/"});" href="/star/certified-star-auditors/">Certified STAR Auditors</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Member Portal - https://cloudsecurityalliance.my.site.com"});" href="https://cloudsecurityalliance.my.site.com">Member Portal</a></div></div></div></div></div></div></div><div class="c-megamenu__category" data-target="#star-program-nav"><div class="c-megamenu__anchor">STAR Program</div><div class="c-megamenu__category-content" id="star-program-nav"><div class="o-container"><div class="o-grid o-grid--small-fit o-grid--medium-fit o-grid--large-fit"><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Home - /star/"});" href="/star/">STAR Home</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Registry - /star/registry/"});" data-turbo="false" href="/star/registry/">STAR Registry</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Submit to Registry - /star/submit/"});" href="/star/submit/">Submit to Registry</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Provide Feedback - /star/feedback/"});" href="/star/feedback/">Provide Feedback</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certified STAR Auditors - /star/certified-star-auditors/"});" href="/star/certified-star-auditors/">Certified STAR Auditors</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Enabled Solutions - /star/star-enabled-solutions/overview/"});" href="/star/star-enabled-solutions/overview/">STAR Enabled Solutions</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Stay compliant in the cloud</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CCAK Training - /education/ccak/"});" href="/education/ccak/">CCAK Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Lead Auditor Training - /education/star-lead-auditor-training/"});" href="/education/star-lead-auditor-training/">STAR Lead Auditor Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Training for Government Agencies - /education/gsa-schedule/"});" href="/education/gsa-schedule/">Training for Government Agencies</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Governance, Risk & Compliance Tools</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Cloud Controls Matrix (CCM) - /research/cloud-controls-matrix/"});" href="/research/cloud-controls-matrix/">Cloud Controls Matrix (CCM)</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Consensus Assessment Initiative Questionnaire (CAIQ) - /research/cloud-controls-matrix/"});" href="/research/cloud-controls-matrix/">Consensus Assessment Initiative Questionnaire (CAIQ)</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"EU Cloud Code of Conduct - /gdpr/eu-cloud-code-of-conduct/"});" href="/gdpr/eu-cloud-code-of-conduct/">EU Cloud Code of Conduct</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Level 1 - /star/registry/?level=1"});" data-turbo="false" href="/star/registry/?level=1">STAR Level 1</a></div><div class="c-megamenu__item-description">At level one organizations submit a self-assessment.</div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"View companies at level one - /star/registry/?level=1"});" data-turbo="false" href="/star/registry/?level=1">View companies at level one</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Learn about level one - /star/#tab_levelOne"});" href="/star/#tab_levelOne">Learn about level one</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Level 2 - /star/registry/?level=2"});" data-turbo="false" href="/star/registry/?level=2">STAR Level 2</a></div><div class="c-megamenu__item-description">At level two organizations earn a certification or third-party attestation.</div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"View companies at level two - /star/registry/?level=2"});" data-turbo="false" href="/star/registry/?level=2">View companies at level two</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Learn about level two - /star/#tab_levelTwo"});" href="/star/#tab_levelTwo">Learn about level two</a></div></div></div></div></div></div></div><div class="c-megamenu__category" data-target="#certificates-training-nav"><div class="c-megamenu__anchor">Certificates & Training</div><div class="c-megamenu__category-content" id="certificates-training-nav"><div class="o-container"><div class="o-grid o-grid--small-fit o-grid--medium-fit o-grid--large-fit"><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Online Education Platforms</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Knowledge Center - https://knowledge.cloudsecurityalliance.org"});" href="https://knowledge.cloudsecurityalliance.org">Knowledge Center</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CSA Exams - https://exams.cloudsecurityalliance.org"});" href="https://exams.cloudsecurityalliance.org">CSA Exams</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Events - /events/"});" href="/events/">Events</a></div><div class="c-megamenu__item-description">Learn and network while you earn CPE credits.</div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Virtual Events \u0026 Webinars - /events/virtual-and-webinars/"});" data-turbo="false" href="/events/virtual-and-webinars/">Virtual Events & Webinars</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Event Sponsorships - /sponsor/"});" href="/sponsor/">Event Sponsorships</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certificates - /education/"});" href="/education/">Certificates</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certificate of Cloud Security Knowledge (CCSK) - /education/ccsk/"});" href="/education/ccsk/">Certificate of Cloud Security Knowledge (CCSK)</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certificate of Cloud Auditing Knowledge (CCAK) - /education/ccak/"});" href="/education/ccak/">Certificate of Cloud Auditing Knowledge (CCAK)</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certificate of Competence in Zero Trust (CCZT) - /education/cczt/"});" href="/education/cczt/">Certificate of Competence in Zero Trust (CCZT)</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Digital Badges - /education/digital-badges/"});" href="/education/digital-badges/">Digital Badges</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Trainings - /education/"});" href="/education/">Trainings</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Cloud Infrastructure Security Training - /education/cloud-infrastructure-security-training"});" href="/education/cloud-infrastructure-security-training">Cloud Infrastructure Security Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Lead Auditor Training - /education/star-lead-auditor-training/"});" href="/education/star-lead-auditor-training/">STAR Lead Auditor Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Advanced Cloud Security Practitioner (ACSP) Training - /education/advanced-cloud-security-practitioner-training"});" href="/education/advanced-cloud-security-practitioner-training">Advanced Cloud Security Practitioner (ACSP) Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CCSK Train the Trainer - /education/train-the-trainer/"});" href="/education/train-the-trainer/">CCSK Train the Trainer</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Training Network - /education/partner#become_partner"});" href="/education/partner#become_partner">Training Network</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Become an Instructor - /education/instructors/"});" href="/education/instructors/">Become an Instructor</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Become a Training Partner - /education/training-partners/"});" href="/education/training-partners/">Become a Training Partner</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Specialized Training Options</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Train my entire team - /education/business/"});" href="/education/business/">Train my entire team</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Training for Government Agencies - /education/gsa-schedule/"});" href="/education/gsa-schedule/">Training for Government Agencies</a></div></div></div></div></div></div></div><div class="c-megamenu__category" data-target="#research-nav"><div class="c-megamenu__anchor">Research</div><div class="c-megamenu__category-content" id="research-nav"><div class="o-container"><div class="o-grid o-grid--small-fit o-grid--medium-fit o-grid--large-fit"><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CSA Research - /research/"});" href="/research/">CSA Research</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Latest Research - /research/artifacts"});" href="/research/artifacts">Latest Research</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Working Groups - /research/working-groups/"});" href="/research/working-groups/">Working Groups</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Chapters - /chapters/"});" href="/chapters/">Chapters</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Open Peer Reviews - /research/contribute#peer-reviews"});" href="/research/contribute#peer-reviews">Open Peer Reviews</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Research Topics - /research/topics"});" href="/research/topics">Research Topics</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Strategic Initiatives</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Safety Initiative - /research/working-groups/artificial-intelligence/"});" href="/research/working-groups/artificial-intelligence/">AI Safety Initiative</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Zero Trust Advancement Center - /zt/"});" href="/zt/">Zero Trust Advancement Center</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CxO Trust - /cxo-trust/"});" href="/cxo-trust/">CxO Trust</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Trusted Cloud Consultant - /trusted-cloud-consultant/"});" href="/trusted-cloud-consultant/">Trusted Cloud Consultant</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"FinCloud Security - /fincloud-security"});" href="/fincloud-security">FinCloud Security</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Thought Leadership</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CloudBytes Webinars - /events/virtual-and-webinars/?event_kind=Webinar"});" data-turbo="false" href="/events/virtual-and-webinars/?event_kind=Webinar">CloudBytes Webinars</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Blog - /blog/"});" href="/blog/">Blog</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Getting Started with CSA Research</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Cloud security best practices - /research/guidance/"});" href="/research/guidance/">Cloud security best practices</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Assess your cloud compliance - /research/cloud-controls-matrix/"});" href="/research/cloud-controls-matrix/">Assess your cloud compliance</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Security questionnaire for vendors - /artifacts/star-level-1-security-questionnaire-caiq-v4/"});" href="/artifacts/star-level-1-security-questionnaire-caiq-v4/">Security questionnaire for vendors</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Top threats to cloud computing - /research/working-groups/top-threats/"});" href="/research/working-groups/top-threats/">Top threats to cloud computing</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Cloud Security Glossary - /cloud-security-glossary"});" href="/cloud-security-glossary">Cloud Security Glossary</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Awards & Recognition</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Juanita Koilpillai Awards - /research/juanita-koilpillai/service-award/"});" href="/research/juanita-koilpillai/service-award/">Juanita Koilpillai Awards</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Research Fellows - /research/fellowship#fellows"});" href="/research/fellowship#fellows">Research Fellows</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Critical Topics</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Safety Initiative - /research/working-groups/artificial-intelligence"});" href="/research/working-groups/artificial-intelligence">AI Safety Initiative</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Technology and Risk - /research/working-groups/ai-technology-and-risk"});" href="/research/working-groups/ai-technology-and-risk">AI Technology and Risk</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Governance \u0026 Compliance - /research/working-groups/ai-governance-compliance"});" href="/research/working-groups/ai-governance-compliance">AI Governance & Compliance</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Controls - /research/working-groups/ai-controls"});" href="/research/working-groups/ai-controls">AI Controls</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Organizational Responsibilities - /research/working-groups/ai-organizational-responsibilities"});" href="/research/working-groups/ai-organizational-responsibilities">AI Organizational Responsibilities</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Enterprise Architecture - /research/working-groups/enterprise-architecture"});" href="/research/working-groups/enterprise-architecture">Enterprise Architecture</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Blockchain - /research/working-groups/blockchain"});" href="/research/working-groups/blockchain">Blockchain</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Zero Trust - /research/working-groups/zero-trust"});" href="/research/working-groups/zero-trust">Zero Trust</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"DevSecOps - /research/working-groups/devsecops"});" href="/research/working-groups/devsecops">DevSecOps</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Top Threats - /research/working-groups/top-threats"});" href="/research/working-groups/top-threats">Top Threats</a></div></div></div></div></div></div></div></div><div class="o-grid__cell c-megamenu__search"><form action="/search" class="input-pair u-mb0" method="get" role="search"><label><span class="u-screen-reader">Search for:</span></label><input autocomplete="off" class="c-megamenu__search-input" name="s" placeholder="Search CSA resources, tools, research publications and more…" title="Search for:" type="text" value="" /><button class="c-button c-button--secondary"><i class="fas fa-search"></i></button><div class="c-button c-button--expand"><i class="fas fa-search"></i></div><div class="c-button c-button--close"><div class="i fas fa-times"></div></div></form></div></div></div></div></div><div id="megamenu_mobile"><div class="c-mobile-menu"><div class="c-mobile-menu__head"><a class="c-megamenu__logo" href="/"><img src="/assets/CSA-logo-RGB-a0a3855889ad836fa585d60f6caf8d619f241d43904c304c2f64284127fe9bf3.svg" /></a><span class="c-mobile-menu__search"><a style="color: black" href="/search"><i class="fas fa-search"></i></a></span><span class="c-mobile-menu__hamburger"><i class="fas fa-bars"></i></span></div><div class="o-container c-mobile-menu__body"><div class="c-megamenu__categories"><div class="c-megamenu__category" data-target="#mobile-membership-nav"><div class="c-megamenu__anchor">Membership</div><div class="c-megamenu__category-content" id="mobile-membership-nav"><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Membership Benefits - /membership/"});" href="/membership/">Membership Benefits</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Our Member Community - /membership/current/"});" href="/membership/current/">Our Member Community</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Get Involved - /membership/get-involved/"});" href="/membership/get-involved/">Get Involved</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Become a Member - /membership/contact/"});" href="/membership/contact/">Become a Member</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Member-Exclusive Programs</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Enabled Solutions - /star/registry/star-enabled-solutions/"});" href="/star/registry/star-enabled-solutions/">STAR Enabled Solutions</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Trusted Cloud Consultant - /trusted-cloud-consultant/registry/"});" href="/trusted-cloud-consultant/registry/">Trusted Cloud Consultant</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Trusted Cloud Provider - /trusted-cloud-provider/"});" href="/trusted-cloud-provider/">Trusted Cloud Provider</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certified STAR Auditors - /star/certified-star-auditors/"});" href="/star/certified-star-auditors/">Certified STAR Auditors</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Member Portal - https://cloudsecurityalliance.my.site.com"});" href="https://cloudsecurityalliance.my.site.com">Member Portal</a></div></div></div></div></div><hr /><div class="c-megamenu__category" data-target="#mobile-star-program-nav"><div class="c-megamenu__anchor">STAR Program</div><div class="c-megamenu__category-content" id="mobile-star-program-nav"><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Home - /star/"});" href="/star/">STAR Home</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Registry - /star/registry/"});" data-turbo="false" href="/star/registry/">STAR Registry</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Submit to Registry - /star/submit/"});" href="/star/submit/">Submit to Registry</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Provide Feedback - /star/feedback/"});" href="/star/feedback/">Provide Feedback</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certified STAR Auditors - /star/certified-star-auditors/"});" href="/star/certified-star-auditors/">Certified STAR Auditors</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Enabled Solutions - /star/star-enabled-solutions/overview/"});" href="/star/star-enabled-solutions/overview/">STAR Enabled Solutions</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Stay compliant in the cloud</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CCAK Training - /education/ccak/"});" href="/education/ccak/">CCAK Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Lead Auditor Training - /education/star-lead-auditor-training/"});" href="/education/star-lead-auditor-training/">STAR Lead Auditor Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Training for Government Agencies - /education/gsa-schedule/"});" href="/education/gsa-schedule/">Training for Government Agencies</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Governance, Risk & Compliance Tools</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Cloud Controls Matrix (CCM) - /research/cloud-controls-matrix/"});" href="/research/cloud-controls-matrix/">Cloud Controls Matrix (CCM)</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Consensus Assessment Initiative Questionnaire (CAIQ) - /research/cloud-controls-matrix/"});" href="/research/cloud-controls-matrix/">Consensus Assessment Initiative Questionnaire (CAIQ)</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"EU Cloud Code of Conduct - /gdpr/eu-cloud-code-of-conduct/"});" href="/gdpr/eu-cloud-code-of-conduct/">EU Cloud Code of Conduct</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Level 1 - /star/registry/?level=1"});" data-turbo="false" href="/star/registry/?level=1">STAR Level 1</a></div><div class="c-megamenu__item-description">At level one organizations submit a self-assessment.</div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"View companies at level one - /star/registry/?level=1"});" data-turbo="false" href="/star/registry/?level=1">View companies at level one</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Learn about level one - /star/#tab_levelOne"});" href="/star/#tab_levelOne">Learn about level one</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Level 2 - /star/registry/?level=2"});" data-turbo="false" href="/star/registry/?level=2">STAR Level 2</a></div><div class="c-megamenu__item-description">At level two organizations earn a certification or third-party attestation.</div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"View companies at level two - /star/registry/?level=2"});" data-turbo="false" href="/star/registry/?level=2">View companies at level two</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Learn about level two - /star/#tab_levelTwo"});" href="/star/#tab_levelTwo">Learn about level two</a></div></div></div></div></div><hr /><div class="c-megamenu__category" data-target="#mobile-certificates-training-nav"><div class="c-megamenu__anchor">Certificates & Training</div><div class="c-megamenu__category-content" id="mobile-certificates-training-nav"><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Online Education Platforms</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Knowledge Center - https://knowledge.cloudsecurityalliance.org"});" href="https://knowledge.cloudsecurityalliance.org">Knowledge Center</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CSA Exams - https://exams.cloudsecurityalliance.org"});" href="https://exams.cloudsecurityalliance.org">CSA Exams</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Events - /events/"});" href="/events/">Events</a></div><div class="c-megamenu__item-description">Learn and network while you earn CPE credits.</div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Virtual Events \u0026 Webinars - /events/virtual-and-webinars/"});" data-turbo="false" href="/events/virtual-and-webinars/">Virtual Events & Webinars</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Event Sponsorships - /sponsor/"});" href="/sponsor/">Event Sponsorships</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certificates - /education/"});" href="/education/">Certificates</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certificate of Cloud Security Knowledge (CCSK) - /education/ccsk/"});" href="/education/ccsk/">Certificate of Cloud Security Knowledge (CCSK)</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certificate of Cloud Auditing Knowledge (CCAK) - /education/ccak/"});" href="/education/ccak/">Certificate of Cloud Auditing Knowledge (CCAK)</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Certificate of Competence in Zero Trust (CCZT) - /education/cczt/"});" href="/education/cczt/">Certificate of Competence in Zero Trust (CCZT)</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Digital Badges - /education/digital-badges/"});" href="/education/digital-badges/">Digital Badges</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Trainings - /education/"});" href="/education/">Trainings</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Cloud Infrastructure Security Training - /education/cloud-infrastructure-security-training"});" href="/education/cloud-infrastructure-security-training">Cloud Infrastructure Security Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"STAR Lead Auditor Training - /education/star-lead-auditor-training/"});" href="/education/star-lead-auditor-training/">STAR Lead Auditor Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Advanced Cloud Security Practitioner (ACSP) Training - /education/advanced-cloud-security-practitioner-training"});" href="/education/advanced-cloud-security-practitioner-training">Advanced Cloud Security Practitioner (ACSP) Training</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CCSK Train the Trainer - /education/train-the-trainer/"});" href="/education/train-the-trainer/">CCSK Train the Trainer</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Training Network - /education/partner#become_partner"});" href="/education/partner#become_partner">Training Network</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Become an Instructor - /education/instructors/"});" href="/education/instructors/">Become an Instructor</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Become a Training Partner - /education/training-partners/"});" href="/education/training-partners/">Become a Training Partner</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Specialized Training Options</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Train my entire team - /education/business/"});" href="/education/business/">Train my entire team</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Training for Government Agencies - /education/gsa-schedule/"});" href="/education/gsa-schedule/">Training for Government Agencies</a></div></div></div></div></div><hr /><div class="c-megamenu__category" data-target="#mobile-research-nav"><div class="c-megamenu__anchor">Research</div><div class="c-megamenu__category-content" id="mobile-research-nav"><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CSA Research - /research/"});" href="/research/">CSA Research</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Latest Research - /research/artifacts"});" href="/research/artifacts">Latest Research</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Working Groups - /research/working-groups/"});" href="/research/working-groups/">Working Groups</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Chapters - /chapters/"});" href="/chapters/">Chapters</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Open Peer Reviews - /research/contribute#peer-reviews"});" href="/research/contribute#peer-reviews">Open Peer Reviews</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Research Topics - /research/topics"});" href="/research/topics">Research Topics</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Strategic Initiatives</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Safety Initiative - /research/working-groups/artificial-intelligence/"});" href="/research/working-groups/artificial-intelligence/">AI Safety Initiative</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Zero Trust Advancement Center - /zt/"});" href="/zt/">Zero Trust Advancement Center</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CxO Trust - /cxo-trust/"});" href="/cxo-trust/">CxO Trust</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Trusted Cloud Consultant - /trusted-cloud-consultant/"});" href="/trusted-cloud-consultant/">Trusted Cloud Consultant</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"FinCloud Security - /fincloud-security"});" href="/fincloud-security">FinCloud Security</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Thought Leadership</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"CloudBytes Webinars - /events/virtual-and-webinars/?event_kind=Webinar"});" data-turbo="false" href="/events/virtual-and-webinars/?event_kind=Webinar">CloudBytes Webinars</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Blog - /blog/"});" href="/blog/">Blog</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Getting Started with CSA Research</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Cloud security best practices - /research/guidance/"});" href="/research/guidance/">Cloud security best practices</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Assess your cloud compliance - /research/cloud-controls-matrix/"});" href="/research/cloud-controls-matrix/">Assess your cloud compliance</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Security questionnaire for vendors - /artifacts/star-level-1-security-questionnaire-caiq-v4/"});" href="/artifacts/star-level-1-security-questionnaire-caiq-v4/">Security questionnaire for vendors</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Top threats to cloud computing - /research/working-groups/top-threats/"});" href="/research/working-groups/top-threats/">Top threats to cloud computing</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Cloud Security Glossary - /cloud-security-glossary"});" href="/cloud-security-glossary">Cloud Security Glossary</a></div></div><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Awards & Recognition</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Juanita Koilpillai Awards - /research/juanita-koilpillai/service-award/"});" href="/research/juanita-koilpillai/service-award/">Juanita Koilpillai Awards</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Research Fellows - /research/fellowship#fellows"});" href="/research/fellowship#fellows">Research Fellows</a></div></div></div><div class="o-grid__cell o-grid__cell--width-25@medium"><div class="c-megamenu__subcategory"><div class="c-megamenu__item"><span>Critical Topics</span></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Safety Initiative - /research/working-groups/artificial-intelligence"});" href="/research/working-groups/artificial-intelligence">AI Safety Initiative</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Technology and Risk - /research/working-groups/ai-technology-and-risk"});" href="/research/working-groups/ai-technology-and-risk">AI Technology and Risk</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Governance \u0026 Compliance - /research/working-groups/ai-governance-compliance"});" href="/research/working-groups/ai-governance-compliance">AI Governance & Compliance</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Controls - /research/working-groups/ai-controls"});" href="/research/working-groups/ai-controls">AI Controls</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"AI Organizational Responsibilities - /research/working-groups/ai-organizational-responsibilities"});" href="/research/working-groups/ai-organizational-responsibilities">AI Organizational Responsibilities</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Enterprise Architecture - /research/working-groups/enterprise-architecture"});" href="/research/working-groups/enterprise-architecture">Enterprise Architecture</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Blockchain - /research/working-groups/blockchain"});" href="/research/working-groups/blockchain">Blockchain</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Zero Trust - /research/working-groups/zero-trust"});" href="/research/working-groups/zero-trust">Zero Trust</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"DevSecOps - /research/working-groups/devsecops"});" href="/research/working-groups/devsecops">DevSecOps</a></div><div class="c-megamenu__item c-megamenu__item--actionable"><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"mega_menu","event_label":"Top Threats - /research/working-groups/top-threats"});" href="/research/working-groups/top-threats">Top Threats</a></div></div></div></div></div><hr /><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"quick_links_menu","event_label":"Cloud 101 - https://cloudsecurityalliance.org/cloud-newbie"});" href="https://cloudsecurityalliance.org/cloud-newbie">Cloud 101</a><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"quick_links_menu","event_label":"Circle - https://circle.cloudsecurityalliance.org/"});" rel="noopener" target="_blank" href="https://circle.cloudsecurityalliance.org/">Circle</a><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"quick_links_menu","event_label":"Events - https://cloudsecurityalliance.org/events/"});" href="https://cloudsecurityalliance.org/events/">Events</a><a class="c-megamenu__anchor" onclick="gtag('event', 'sitewide_menu_click', {"event_category":"quick_links_menu","event_label":"Blog - https://cloudsecurityalliance.org/blog/"});" href="https://cloudsecurityalliance.org/blog/">Blog</a><div class="u-pb16"><form class="c-megamenu__anchor" method="post" action="/auth/auth0"><button data-turbo="false" type="submit">Sign In</button><input type="hidden" name="authenticity_token" value="7xXz0hReH_GrVMUIm3wy1mfvOj7g24sQcewjzSmVlCzK8u6GkudzSg0P_Z57V77vVeNB7vNNTCQEx6cz2AJLAg" autocomplete="off" /></form></div></div></div></div></div><div class="app_notification o-area o-area--inverse u-centered u-inverse u-pt8 u-pb8 u-bg-color-blue-300" data-controller="record-link-interaction" data-record-link-interaction-action-value="click" data-record-link-interaction-interactable-id-value="293" data-record-link-interaction-interactable-type-value="AppNotification"><small class="u-text-color-white"><div class="trix-content"> <div>Master CSA’s Security, Trust, Assurance, and Risk program—<a href="https://cloudsecurityalliance.org/artifacts/star-prep-kit">download the STAR Prep Kit</a> for essential tools to enhance your assurance!</div> </div> </small></div></header><main class="c-layout-main"><div class="c-container"><div class="o-container"></div></div><div class="o-area o-area--layered o-area--separated o-area--inverse"><div class="o-area__layer" style="background-color: #171624; background-image: url(/assets/star/hero-bg-pattern-9253f63fd1699501e62ed81d2d6346ff909e45990650398ebb523e9599fef76c.png)"></div><div class="o-area__top-layer"><div class="o-container"><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="o-grid__cell o-grid__cell--width-60@medium"><h1 class="c-heading">Security, Trust, Assurance and Risk (STAR)</h1><h3 class="u-text-color-gray-50 c-heading">The industry's most powerful program for security assurance in the cloud.</h3><div class="c-button-group u-mt40"><a data-turbo="false" class="c-button c-button--primary c-button--elevated" href="/star/registry">View the Registry</a><a class="c-button c-button--primary c-button--ghost c-button--elevated" href="/artifacts/star-prep-kit">Free Prep Kit</a></div></div><div class="o-grid__cell o-grid__cell--width-35@medium"><img src="/assets/star/overview/STAR-hero-1d68ab7e569920a25fc639748ed1754ea349046949ff4ff1c3c560a7b9a9a2ad.png" /></div></div></div></div></div><div class="o-area"><div class="c-nav"><div class="o-container"><div class="c-nav__item"><a class="c-nav__anchor c-nav__anchor--active" href="/star">STAR Home</a></div><div class="c-nav__item"><a data-turbo="false" class="c-nav__anchor" href="/star/registry">Registry</a></div><div class="c-nav__item"><a class="c-nav__anchor" href="/star/submit">Submit To Registry</a></div><div class="c-nav__item"><a class="c-nav__anchor" href="/star/contact">Contact Us</a></div><div class="c-nav__item"><a class="c-nav__anchor" href="/star/resources">Resources</a></div><div class="c-nav__item"><a class="c-nav__anchor" href="/star/registry/star-enabled-solutions">STAR Solutions</a></div></div></div></div><div class="o-area"><div class="o-container"><div class="c-breadcrumbs"><div class="c-breadcrumbs__item"><a href="/">Home</a></div><div class="c-breadcrumbs__item">STAR</div></div></div></div><div class="o-area"><div class="b-append-star-top"></div></div><div class="o-area o-area--separated"><div class="o-container"><h5>The Security, Trust, Assurance, and Risk (STAR) Registry is a publicly accessible registry that documents the security and privacy controls provided by popular cloud computing offerings.</h5><p class="u-text-color-gray-400 u-separate"><span>STAR encompasses the key principles of transparency, rigorous auditing, and harmonization of standards outlined in the</span> <a href="/research/cloud-controls-matrix">Cloud Controls Matrix (CCM)</a><span>. Publishing to the registry allows organizations to show current and potential customers their security and compliance posture, including the regulations, standards, and frameworks they adhere to. It ultimately reduces complexity and helps alleviate the need to fill out multiple customer questionnaires.</span><h6 class="u-centered u-separate u-text--bold">Learn more about the different STAR assessments and certifications available below.</h6></p></div></div><div class="o-area o-area--alternating o-area--inverse o-area--split"><div class="o-area__item u-centered u-bg-color-blue-500 o-area__item--separated"><div class="o-area__item__content"><h5 class="u-mb0 u-align-right"><a href="/artifacts/star-provider-verification-template"><span>Ask your cloud service provider to submit to the registry</span></a></h5></div><div class="o-area__item__content"><a class="c-button c-button--icon" href="/artifacts/star-provider-verification-template"><img width="50" height="50" src="/assets/arrows/arrow-white-right-53b5245d5c2df81c153080d64b7cbaeddc14e5b9e8f582d1400b7be8edda4db2.svg" /></a></div></div><div class="o-area__item u-centered u-bg-color-sky-blue o-area__item--separated"><div class="o-area__item__content"><h5 class="u-mb0 u-align-right"><a href="/star/auditors-and-consultants"><span>Auditors and Consultants</span></a></h5></div><div class="o-area__item__content"><a class="c-button c-button--icon" href="/star/auditors-and-consultants"><img width="50" height="50" src="/assets/arrows/arrow-white-right-53b5245d5c2df81c153080d64b7cbaeddc14e5b9e8f582d1400b7be8edda4db2.svg" /></a></div></div></div><div class="o-area o-area--alternating o-area--separated"><div class="o-container"><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="u-centered o-grid__cell o-grid__cell--width-20@medium o-grid__cell--offset-5@medium"><img class="u-mobile--mw50pct" src="/assets/star/registry/CSA_Trusted_Cloud_Provider_badge-430c01e75e19b9dcc78b5aa25128e213790b1c374e711df46023f45c1b388458.svg" /></div><div class="o-grid__cell o-grid__cell--width-70@medium o-grid__cell--offset-5@medium"><h3>CSA Trusted Cloud Providers</h3><p class="u-text-color-gray-400"><span>Organizations listed as CSA Trusted Cloud Providers in the registry are</span> <a href="/membership">CSA Corporate Members</a> <span>that have also fulfilled additional training and volunteer requirements with CSA. Fulfilling these requirements demonstrates a commitment to the professional development of their employees to achieve cloud security competency, and a commitment to the industry at large.</span></p><div class="o-grid o-grid-mobile o-grid--small-full o-grid--medium-full o-grid--large-fit o-grid--no-gutter"><div class="o-grid__cell"><p><a href="/artifacts/trusted-cloud-provider-faq/"><span>Read the FAQ</span> <i class="fas fa-long-arrow-alt-right"></i></a></p><p><a data-turbo="false" href="/star/registry?view_only=trustedProviders"><span>View trusted cloud providers</span> <i class="fas fa-long-arrow-alt-right"></i></a></p></div><div class="o-grid__cell"><p><a href="/articles/cloud-security-alliance-shines-light-on-excellence-in-cloud-provider-security/"><span>Read the press release</span> <i class="fas fa-long-arrow-alt-right"></i></a></p><p><a href="/membership/contact"><span>Contact us to apply</span> <i class="fas fa-long-arrow-alt-right"></i></a></p></div></div></div></div></div></div><div class="o-area o-area--alternating o-area--separated" id="levels"><div class="o-container"><h2 class="c-heading c-heading--section">Levels of STAR</h2><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="o-grid__cell o-grid__cell--width-60@medium o-grid__cell--offset-20@medium"><p class="u-text-color-gray-400"><span>There are multiple levels of assurance for companies that submit to the STAR registry. Each level has a different set of requirements. You can also</span> <a href="/artifacts/star-level-and-scheme-requirements">download the following information as a pdf here</a><span>.</span></p></div></div><div class="c-tabbed"><div class="c-tabbed__nav"><a class="c-tabbed__button c-tabbed__button--active" href="#levelOne">LEVEL ONE</a><a class="c-tabbed__button c-tabbed_button--star-level-2" href="#levelTwo">LEVEL TWO</a></div><div class="c-tabbed__tab" id="levelOne"><div class="c-card" id="tab_levelOne"><div class="c-card__item"><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit u-pt40"><div class="u-centered o-grid__cell o-grid__cell--width-20@medium"><img class="u-mobile--mw50pct" src="/assets/star/overview/STAR-Level-1-badge-f572686709b8f897f07df08ad760e0fe05f6fd523aff965a5b283e19d60247fa.svg" /></div><div class="o-grid__cell"><h3>Level 1: Self-Assessment</h3><p class="u-text-color-gray-400"><span>At level one, organizations can submit the</span> <a href="/artifacts/star-level-1-security-questionnaire-caiq-v4/">Consensus Assessments Initiative Questionnaire</a> <span>based on the</span> <a href="/research/cloud-controls-matrix">Cloud Controls Matrix</a> <span>to evaluate and document their security controls.</span> </p><h5>Who should pursue level one?</h5><p class="u-text-color-gray-400"><span>Organizations should pursue this level if they are...</span><ul class="u-text-color-gray-400"><li>Operating in a low-risk environment</li><li>Wanting to offer increased transparency around the security controls they have in place.</li><li>Looking for a cost-effective way to improve trust and transparency</li></ul></p></div></div><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="o-grid__cell o-grid__cell--offset-20@medium"><h3>Variations of Level 1</h3></div></div><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="o-grid__cell o-grid__cell--width-20@medium"><img src="/assets/star/overview/caiq-6032480b10b9d16047887207f17cabf285addf238b2f8cc028792eed6aa3a08b.svg" /></div><div class="o-grid__cell"><h6 class="u-mb0">Security Self-Assessment</h6><p class="u-text-color-gray-400"><span>CSA STAR Self-Assessment is a complimentary offering that documents the security controls provided by various cloud computing offerings, thereby helping users assess the security of cloud providers they currently use or are considering using. Cloud providers submit the Consensus Assessments Initiative Questionnaire (CAIQ) to document compliance with the</span> <a href="/research/cloud-controls-matrix">Cloud Controls Matrix (CCM)</a><span>. This information then becomes publicly available, promoting industry transparency and providing customer visibility into specific provider security practices. STAR Self-Assessments are updated annually.</span></p><p><strong>The CAIQ v4 has two versions:</strong><ul><li><strong>CCM + CAIQ v4:</strong> <span>The CAIQ v4 bundled with CCM here is intended to be used as a reference only. You cannot use the spreadsheet that contains both the CAIQ and CCM to submit to the registry.</span></li><li><strong>STAR Level 1: Security Questionnaire (CAIQ v4):</strong> <span>Use</span> <a href="https://cloudsecurityalliance.org/artifacts/star-level-1-security-questionnaire-caiq-v4/">this</a> <span>version of CAIQ v4 to fill out and submit to the STAR registry.</span></li><li><strong>CCM Lite + CAIQ Lite:</strong> <span>Streamlined versions of the CCM + CAIQ v4 tailored to meet the needs of SMEs and startups. These tools offer essential resources to enhance cloud security posture within resource constraints, serving as an initial step towards comprehensive Level 1 self-assessment.</span></li></ul></p></div></div><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="o-grid__cell o-grid__cell--offset-20@medium"><p class="u-text--bold"><a data-turbo="false" href="/star/registry?level=1"><span>View organizations at STAR Level 1</span> <i class="fas fa-long-arrow-alt-right"></i></a></p></div></div></div></div></div><div class="c-tabbed__tab" id="levelTwo"><div class="c-card" id="tab_levelTwo"><div class="c-card__item"><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit u-pt40"><div class="u-centered o-grid__cell o-grid__cell--width-20@medium"><img class="u-mobile--mw50pct" src="/assets/star/overview/STAR-Level-2-badge-faef7dc46990d667f1ce083d3d10a7c9ddee480de12ef57c8d33d83ad2894831.svg" /></div><div class="o-grid__cell"><h3>Level 2: Third-Party Audit</h3><p class="u-text-color-gray-400">Level 2 of STAR allows organizations to build off of other industry certifications and standards to make them specific for the cloud.</p><p class="u-text-color-gray-400">Organizations looking for a third-party audit can choose from one or more of the security and privacy audits and certifications. An organization’s location, along with the regulations and standards it is subject to will have the greatest factor in determining which ones are appropriate to pursue.</p><h5>Which organizations should pursue level 2?</h5><p class="u-text-color-gray-400"><span>Organizations should pursue this level if they are...</span><ul class="u-text-color-gray-400"><li>Operating in a medium to high risk environment</li><li>Already hold or adhere to the following: ISO27001, SOC 2, GB/T 22080-2008, or GDPR</li><li>Looking for a cost-effective way to increase assurance for cloud security and privacy.</li></ul></p><p><strong>There are associated</strong> <strong class="c-modal-candidate c-modal-candidate--explanation"><span class="c-modal-candidate__trigger">fees</span><script type="c-modal-candidate__content"><h3 class="u-centered">Certificate Pricing</h3><table class="c-table"><thead class="c-table__head"><tr class="c-table__row"><th class="c-table__cell"><span>Effective Employees</span></th><th class="c-table__cell">Fee (Euro)</th></tr></thead><tbody class="c-table__body"><tr class="c-table__row"><td class="c-table__cell">1 to 10</td><td class="c-table__cell">600</td></tr><tr class="c-table__row"><td class="c-table__cell">11 to 25</td><td class="c-table__cell">1200</td></tr><tr class="c-table__row"><td class="c-table__cell">26 to 75</td><td class="c-table__cell">2100</td></tr><tr class="c-table__row"><td class="c-table__cell">76 to 250</td><td class="c-table__cell">3600</td></tr><tr class="c-table__row"><td class="c-table__cell">251 to 700</td><td class="c-table__cell">6000</td></tr><tr class="c-table__row"><td class="c-table__cell">701 to 1500</td><td class="c-table__cell">8400</td></tr><tr class="c-table__row"><td class="c-table__cell">1501+</td><td class="c-table__cell">12000</td></tr></tbody></table><h3 class="u-centered">Attestation Pricing</h3><table class="c-table"><thead class="c-table__head"><tr class="c-table__row"><th class="c-table__cell"><span>Effective Employees</span></th><th class="c-table__cell">Fee (USD)</th></tr></thead><tbody class="c-table__body"><tr class="c-table__row"><td class="c-table__cell">1 to 10</td><td class="c-table__cell">$650</td></tr><tr class="c-table__row"><td class="c-table__cell">11 to 25</td><td class="c-table__cell">$1,300</td></tr><tr class="c-table__row"><td class="c-table__cell">26 to 75</td><td class="c-table__cell">$2,300</td></tr><tr class="c-table__row"><td class="c-table__cell">76 to 250</td><td class="c-table__cell">$4,050</td></tr><tr class="c-table__row"><td class="c-table__cell">251 to 700</td><td class="c-table__cell">$6,650</td></tr><tr class="c-table__row"><td class="c-table__cell">701 to 1500</td><td class="c-table__cell">$9,350</td></tr><tr class="c-table__row"><td class="c-table__cell">1501+</td><td class="c-table__cell">$13,300</td></tr></tbody></table></script></strong> <span>for STAR Level 2.</span> <a href="/membership">CSA Corporate Members</a> <span>receive a price reduction on STAR Level 2 certifications and attestations.</span></p><p><strong>Once you are ready to earn STAR Level 2, read the</strong> <a href="https://support.cloudsecurityalliance.org/hc/en-us/articles/7579045774871-Code-of-Practice-for-Implementing-STAR-Level-2">Code of Practice for Implementing STAR Level 2</a><span>. This guide will explain both the practical steps as well as overall strategy you will need to implement to earn a STAR Certification or Attestation.</span></p></div></div><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="o-grid__cell o-grid__cell--offset-20@medium"><h3>Variations of Level 2</h3></div></div><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="o-grid__cell o-grid__cell--width-20@medium"><img src="/assets/star/overview/star-at-18b9c7b519e4fd6c58fc060218907702d5878b0e0d74e09eceeacc7708c5af19.svg" /></div><div class="o-grid__cell"><h6 class="u-mb0">STAR Attestation: For SOC 2</h6><p class="u-text-color-gray-400"><span>The CSA STAR Attestation is a collaboration between CSA and the AICPA to provide guidelines for CPAs to conduct SOC 2 engagements using criteria from the AICPA (Trust Service Principles, AT 101) and the CSA</span> <a href="/research/cloud-controls-matrix">Cloud Controls Matrix</a><span>. The STAR Attestation provides for rigorous third party independent assessments of cloud providers. Attestation listings will expire after one year unless updated.</span></p><p><a href="/star/certified-star-auditors"><span>View approved assessment firms</span> <i class="fas fa-long-arrow-alt-right"></i></a></p></div></div><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="o-grid__cell o-grid__cell--width-20@medium"><img src="/assets/star/overview/star-cert-4c5f69f2f037d558f595d10760a203176925c2796d040f776e21c5b235fd7336.svg" /></div><div class="o-grid__cell"><h6 class="u-mb0">STAR Certification: For ISO/IEC 27001</h6><p class="u-text-color-gray-400"><span>The CSA STAR Certification is a rigorous third-party independent assessment of the security of a cloud service provider. This technology-neutral certification leverages the requirements of the ISO/IEC 27001 management system standard together with the CSA</span> <a href="/research/cloud-controls-matrix">Cloud Controls Matrix</a><span>. Certification certificates follow normal ISO/IEC 27001 protocol and expire after three years unless updated.</span></p><p><a href="/star/certified-star-auditors"><span>View approved assessment firms</span> <i class="fas fa-long-arrow-alt-right"></i></a></p></div></div><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="o-grid__cell o-grid__cell--width-20@medium"><img src="/assets/star/overview/c-star-8d9e7dd639b12e436a8e59d6ed80701561f82aec36a54e827152559af51e2f28.svg" /></div><div class="o-grid__cell"><h6 class="u-mb0">C-STAR: For the Greater China Market</h6><p class="u-text-color-gray-400"><span>The CSA C-STAR Assessment is a robust third party independent assessment of the security of a cloud service provider for the Greater China market that harmonizes CSA best practices with Chinese national standards. C-STAR leverages the requirements of the GB/T 22080-2008 management system standard together with the CSA</span> <a href="/research/cloud-controls-matrix">Cloud Controls Matrix</a><span>, plus 29 related controls selected from GB/T 22239-2008 and GB/Z 28828-2012. Certification certificates expire after three years unless updated.</span></p></div></div><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="o-grid__cell o-grid__cell--offset-20@medium"><p class="u-text--bold"><a data-turbo="false" href="/star/registry?level=2"><span>View organizations at STAR Level 2</span> <i class="fas fa-long-arrow-alt-right"></i></a></p></div></div></div></div></div><p class="u-centered u-mt32"><a data-turbo="false" class="c-button c-button--primary" href="/star/submit">Submit to the Registry</a></p></div></div></div><div class="o-area o-area--announcement u-bg-color-blue-300"><div class="o-area__container"><div class="o-area__item"><h5 class="c-heading"><a href="/circle">Continue your professional development on Circle, CSA's online community platform</a></h5></div><div class="o-area__item"><a class="c-button c-button--icon c-button--green u-pb0" href="/circle"><img width="50" height="50" src="/assets/arrows/arrow-white-right-53b5245d5c2df81c153080d64b7cbaeddc14e5b9e8f582d1400b7be8edda4db2.svg" /></a></div></div></div><div class="o-area o-area--separated o-area--alternating"><div class="o-container"><h2 class="c-heading c-heading--section">Industry Support</h2><div class="glide glide--1 b-unified"><div class="glide__track" data-glide-el="track"><div class="glide__slides"><div class="glide__slide"><div class="c-card c-card--endorsement b-unified__item"><div class="c-quote c-quote--carousel"><div class="c-quote__blockquote"><blockquote><p style="text-wrap: wrap;">Coalfire and Coalfire Certification, the accredited certification body arm of Coalfire, began offering STAR™ attestation and certification services as part of its product catalog in response to increasing customer requests. As part of feedback reviews, Coalfire determined that many of our clients were seeking guidance pertaining to assurance programs that would address compliance in the cloud. While other baseline security standards can be vague when addressing shared responsibilities between the cloud provider and cloud user, the Cloud Controls Matrix (CCM) understands that relationship and enforces design requirements for both parties before rating the degree of conformity for any given objective.</p></blockquote></div><div class="c-quote__cite"><cite><span>David Forman</span><br />Vice President, Coalfire</cite></div></div></div></div><div class="glide__slide"><div class="c-card c-card--endorsement b-unified__item"><div class="c-quote c-quote--carousel c-quote--left"><div class="c-quote__image"><img alt="Ronald Tse" style="object-fit: cover;" src="https://cloudsecurityalliance.org/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTE5NywicHVyIjoiYmxvYl9pZCJ9fQ==--f57f24e044686fa3c9945b14e1633bc3e7ddd7ad/ronald-tse.jpg" /></div><div class="c-quote__blockquote"><blockquote><p style="text-wrap: wrap;">The STAR program is the absolute benchmark on cloud provider security -- covering a full range of aspects together in a leveled scale, allowing cloud providers to differentiate on their cloud security in a transparent manner. Ultimately, transparency at the cloud provider communicates the risks faced by the cloud user to the cloud user, which in turn enables the cloud user to prioritize resources in fulfilling their own requirements and responsibilities. The STAR program effectively facilitates a better relationship between cloud providers and cloud users: this is a unique aspect that cannot be replicated by other cloud security schemes.</p></blockquote></div><div class="c-quote__cite"><cite><span>Ronald Tse</span><br />CEO, Ribose</cite></div></div></div></div><div class="glide__slide"><div class="c-card c-card--endorsement b-unified__item"><div class="c-quote c-quote--carousel c-quote--left"><div class="c-quote__image"><img alt="Willy Fabritius" style="object-fit: cover;" src="https://cloudsecurityalliance.org/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MTQ1NjQsInB1ciI6ImJsb2JfaWQifX0=--73e521a8218dd7fdc30dedbf60b37b0861706d39/2021-12-30%20Willy_Fabritius.JPG" /></div><div class="c-quote__blockquote"><blockquote><p style="text-wrap: wrap;">CSA STAR Certification is an assurance framework, enabling cloud service providers to embed cloud-specific security controls. The maturity model brings a continual focus on addressing the changing risk of this technology, which aligns with BSIs commitment to helping clients make excellence a habit. Our work with the CSA helps us drive the cloud security agenda and ensure STAR Certification remains aligned with the fast-moving industry developments.</p></blockquote></div><div class="c-quote__cite"><cite><span>Willy Fabritius</span></cite></div></div></div></div><div class="glide__slide"><div class="c-card c-card--endorsement b-unified__item"><div class="c-quote c-quote--carousel c-quote--left"><div class="c-quote__image"><img alt="Brian Willis" style="object-fit: cover;" src="https://cloudsecurityalliance.org/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MjI0MDMsInB1ciI6ImJsb2JfaWQifX0=--d1f3245f0aca26e1cbe9843ad01508e19b01ad08/Willis-Brian_web.jpg" /></div><div class="c-quote__blockquote"><blockquote><p style="text-wrap: wrap;">LBMC is a proud corporate member, Certified STAR Auditor, and contributor to the excellent resources made available by the CSA for securing cloud computing environments. Thanks to the knowledge and skills our consultants have gained through CCSK training, The Circle community, and SECtember conferences, we have helped our clients elevate security awareness around the cloud services they offer and consume. For our clients who offer cloud services, the CSA STAR program helps them stand out among their peers as trusted providers. We regularly encourage all our clients to leverage the STAR Registry as a resource for finding providers and partners who have demonstrated their commitment to cloud security.</p></blockquote></div><div class="c-quote__cite"><cite><span>Brian Willis</span><br />Senior Manager at LBMC</cite></div></div></div></div></div></div><div class="glide__arrows" data-glide-el="controls"><button class="glide__arrow glide__arrow--left" data-glide-dir="<"> </button><button class="glide__arrow glide__arrow--right" data-glide-dir=">"> </button></div></div></div></div><div class="o-area o-area--separated o-area--alternating"><div class="o-container"><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="u-centered o-grid__cell o-grid__cell--width-25@medium"><img class="u-mobile--mw50pct" src="/assets/star/overview/podcast-c060c94b2c14c9bca31c7e2ea24e95f4ff3e8361b141a23207c721b04b59c1b8.png" /></div><div class="o-grid__cell"><h3>STAR Podcast</h3><p class="u-text-color-gray-400">Listen to case studies and interviews with organizations that have submitted to the STAR registry or used it to improve vendor procurement within their organization. In this series we interview both vendors and solution providers as well as customers looking for secure solutions. You can learn first hand what it takes to earn a STAR certification or attestation, what the process entails, and how it provides value to future customers.</p><div class="c-audio c-audio--buzzsprout" id="star-podcast"><script charset="utf-8" src="https://www.buzzsprout.com/303731.js?player=small&limit=3&container_id=star-podcast" type="text/javascript"></script></div></div></div><div class="u-pt32 u-centered"><a target="_blank" rel="noopener" class="c-button c-button--orange c-button--elevated" href="https://www.buzzsprout.com/303731">View full list of episodes</a></div></div></div><div class="o-area o-area--inverse u-bg-color-sky-blue"><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="u-pt8 u-pb8 o-grid__cell o-grid__cell--offset-25@medium o-grid__cell--width-45@medium u-align-right"><h5 class="u-mb4 u-mt8"><a style="color: white;" href="/star/certified-star-auditors">View CSA STAR Approved Assessment Firms</a></h5></div><div class="o-grid__cell o-grid__cell--width-25@medium u-pl0"><a class="c-button c-button--icon c-button--green" href="/star/certified-star-auditors"><img width="50" height="50" src="/assets/arrows/arrow-white-right-53b5245d5c2df81c153080d64b7cbaeddc14e5b9e8f582d1400b7be8edda4db2.svg" /></a></div></div></div><div class="o-area o-area--separated o-area--inverse u-bg-color-blue-700"><div class="o-container"><h2 class="c-heading c-heading--section">STAR Enabled Solutions</h2><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="o-grid__cell o-grid__cell--width-60@medium o-grid__cell--offset-20@medium"><p class="u-text-color-gray-50">STAR Enabled Solutions are organizations that have licensed the CCM or CAIQ for use in products and services that are sold to the public. Examples of STAR Enabled products and services are software based products (such as 3rd party risk assessment solutions) or services, such as consultancy assessment methodologies, audits and evaluation approaches, etc. Please contact us to learn more about becoming a STAR Enabled Solution.</p><p class="u-centered"><a class="c-button c-button--primary" href="/star/star-enabled-solutions/overview">Learn more</a></p></div></div></div></div></main><footer class="c-layout-footer"><div class="o-area"><div class="cookie-banner" style="display: block;"><div data-controller="dynamic-content"><div class="c-notification c-notification--info" id="cookie-banner-main"><div class="c-notification__item c-notification__item--icon"><div class="fas fa-info-circle"></div></div><div class="c-notification__item"><p><strong>We value your privacy.</strong> <span>Our website uses analytics and advertising cookies to improve your browsing experience. Read our full</span> <a href="/legal/privacy-notice/">Privacy Policy</a><span>.</span></p><div class="c-button-group c-button-group--centered u-mb16"><a class="c-button c-button--gray" data-action="click->dynamic-content#update" data-dynamic-content-hide-param="#cookie-banner-main" data-dynamic-content-show-param="#cookie-banner-customize" href="#">Customize</a><a class="c-button c-button--blue" id="cookie-banner-accept-all" data-action="cookie-consent#acceptAll" data-controller="cookie-consent" href="#">Allow</a></div></div></div><div class="c-notification c-notification--info" id="cookie-banner-customize" style="display: none;"><div class="c-notification__item c-notification__item--icon"><div class="fas fa-info-circle"></div></div><div class="c-notification__item"><p class="u-pt12" style="line-height: 1.3em; font-size: 1.2em;"><strong>About the Cookies</strong></p><form class="c-form" data-action="cookie-consent#update" data-controller="cookie-consent" action="/star" accept-charset="UTF-8" method="post"><input type="hidden" name="authenticity_token" value="GaAIjePElsJ_9cw8zQWBpCitwvjtOr6PQlzm1OgROs-sNHK9wxkIS6HUAlzNe1WEkNBbnTh0MHKCiFY9wopo6w" autocomplete="off" /><p><strong>Analytics cookies,</strong> from <a target="_blank" href="https://analytics.google.com/">Google Analytics</a> and <a target="_blank" href="https://clarity.microsoft.com/">Microsoft Clarity</a> help us analyze site usage to continuously improve our website.</p><div class="c-form__item-group c-form__item-group--duo c-form__item-group--checkbox--big"><div class="c-form__item"><input id="analytics" type="checkbox" value="1" checked="checked" name="analytics" /></div><div class="c-form__item c-form__item--label"><label for="analytics">Enable cookies for analytics.</label></div></div><p class="u-pt12"><strong>Advertising cookies,</strong> enable <a target="_blank" href="https://policies.google.com/privacy">Google</a> to collect information to display content and ads tailored to your interests.</p><div class="c-form__item-group c-form__item-group--duo c-form__item-group--checkbox--big"><div class="c-form__item"><input id="advertising" type="checkbox" value="1" checked="checked" name="advertising" /></div><div class="c-form__item c-form__item--label"><label for="advertising">Enable cookies for advertising.</label></div></div><div class="c-button-group c-button-group--centered u-mb16 u-mt16"><a class="c-button c-button--gray" id="cookie-banner-reject-all" data-action="cookie-consent#rejectAll" data-controller="cookie-consent" href="#">Decline All</a><input type="submit" name="commit" value="Confirm" class="c-button c-button--blue" data-disable-with="Confirm" /></div></form></div></div></div></div><div class="c-footer"><div class="o-container"><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="c-footer__item o-grid__cell o-grid__cell--width-30@medium u-align-left"><div class="c-footer__logo u-separate"><img src="/assets/csa-logo-white-33c6ce89081b4488f9fe480c8e4f5e662f8a9723e5467d30359ff832c269b7d6.png" /></div><p class="u-separate"><a class="c-button c-button--social-circle c-button--linkedin" target="_blank" rel="noopener" href="https://www.linkedin.com/groups/1864210/profile"><img src="/assets/social-share/li-icon-09fa81c48d4329077ed9608610eb94677c1598373b57333973e931874e641c30.svg" /></a><a class="c-button c-button--social-circle c-button--twitter" target="_blank" rel="noopener" href="https://twitter.com/intent/tweet?text=&url="><img src="/assets/social-share/x-icon-d5737d8484c6d1c6b2c18ad43c18037db1925464c40f14899cdfdb82fe33a861.svg" /></a><a class="c-button c-button--social-circle c-button--facebook" target="_blank" rel="noopener" href="https://www.facebook.com/csacloudfiles"><img src="/assets/social-share/fb-icon-c0307da13019b8e4ef32e5f2e7039eac01c272bcbc2c3a7aad4ba033c0a27153.svg" /></a><a class="c-button c-button--social-circle c-button--youtube" target="_blank" rel="noopener" href="https://www.youtube.com/channel/UCrcG6ZtsBPz3xkUZU6asVhA"><img src="/assets/social-share/yt-icon-ade320bf2b6ffeae084895dac740b736c7dda9f181a871260f83da2462465ab3.svg" /></a><p class="u-separate"><span>© 2009–</span><span>2024</span> <span>Cloud Security Alliance.</span><br /><span>All rights reserved.</span></p></p></div><div class="c-footer__item o-grid__cell"><div class="o-grid o-grid--small-full o-grid--medium-full o-grid--large-fit"><div class="o-grid__cell"><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Corporate Membership - https://cloudsecurityalliance.org/membership/"});" href="https://cloudsecurityalliance.org/membership/">Corporate Membership</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Cloud Customers - https://cloudsecurityalliance.org/membership/enterprises/"});" href="https://cloudsecurityalliance.org/membership/enterprises/">Cloud Customers</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Cloud Solution Providers - https://cloudsecurityalliance.org/membership/solution-providers/"});" href="https://cloudsecurityalliance.org/membership/solution-providers/">Cloud Solution Providers</a></div><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Join as an Individual - https://circle.cloudsecurityalliance.org/home"});" href="https://circle.cloudsecurityalliance.org/home">Join as an Individual</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Circle Community Forum - https://cloudsecurityalliance.org/circle/"});" href="https://cloudsecurityalliance.org/circle/">Circle Community Forum</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Chapters - https://cloudsecurityalliance.org/chapters/"});" href="https://cloudsecurityalliance.org/chapters/">Chapters</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Working Groups - https://cloudsecurityalliance.org/research/working-groups/"});" href="https://cloudsecurityalliance.org/research/working-groups/">Working Groups</a></div><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Research - https://cloudsecurityalliance.org/research/"});" href="https://cloudsecurityalliance.org/research/">Research</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Download Publications - https://cloudsecurityalliance.org/research/artifacts/"});" href="https://cloudsecurityalliance.org/research/artifacts/">Download Publications</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"View Working Groups - https://cloudsecurityalliance.org/research/working-groups/"});" href="https://cloudsecurityalliance.org/research/working-groups/">View Working Groups</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"View All Topics - https://cloudsecurityalliance.org/research/topics"});" href="https://cloudsecurityalliance.org/research/topics">View All Topics</a></div><div class="c-footer__list"><h6><span>Find a...</span></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Cloud Consultant - https://cloudsecurityalliance.org/trusted-cloud-consultant"});" href="https://cloudsecurityalliance.org/trusted-cloud-consultant">Cloud Consultant</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Cloud Service Provider - https://cloudsecurityalliance.org/star/registry/"});" data-turbo="false" href="https://cloudsecurityalliance.org/star/registry/">Cloud Service Provider</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Trusted Cloud Provider - https://cloudsecurityalliance.org/trusted-cloud-provider"});" href="https://cloudsecurityalliance.org/trusted-cloud-provider">Trusted Cloud Provider</a></div></div><div class="o-grid__cell"><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Certificates - https://cloudsecurityalliance.org/education/"});" href="https://cloudsecurityalliance.org/education/">Certificates</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"CCSK - https://cloudsecurityalliance.org/education/ccsk/"});" href="https://cloudsecurityalliance.org/education/ccsk/">CCSK</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"CCAK - https://cloudsecurityalliance.org/education/ccak/"});" href="https://cloudsecurityalliance.org/education/ccak/">CCAK</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"CCZT - https://cloudsecurityalliance.org/education/cczt/"});" href="https://cloudsecurityalliance.org/education/cczt/">CCZT</a></div><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Events - https://cloudsecurityalliance.org/events/"});" href="https://cloudsecurityalliance.org/events/">Events</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Americas - https://cloudsecurityalliance.org/events/americas"});" href="https://cloudsecurityalliance.org/events/americas">Americas</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"EMEA - https://cloudsecurityalliance.org/events/emea/"});" href="https://cloudsecurityalliance.org/events/emea/">EMEA</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"APAC - https://cloudsecurityalliance.org/events/apac/"});" href="https://cloudsecurityalliance.org/events/apac/">APAC</a></div><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Education - https://cloudsecurityalliance.org/education/"});" href="https://cloudsecurityalliance.org/education/">Education</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Blog - https://cloudsecurityalliance.org/blog/"});" href="https://cloudsecurityalliance.org/blog/">Blog</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Virtual Events \u0026 Webinars - https://cloudsecurityalliance.org/events/virtual-and-webinars/"});" data-turbo="false" href="https://cloudsecurityalliance.org/events/virtual-and-webinars/">Virtual Events & Webinars</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Training - https://cloudsecurityalliance.org/education/"});" href="https://cloudsecurityalliance.org/education/">Training</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Cloud 101 - https://cloudsecurityalliance.org/cloud-newbie"});" href="https://cloudsecurityalliance.org/cloud-newbie">Cloud 101</a></div><div class="c-footer__list"><h6><span>Popular Resources</span></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Security Guidance - https://cloudsecurityalliance.org/research/guidance/"});" href="https://cloudsecurityalliance.org/research/guidance/">Security Guidance</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"CCM - https://cloudsecurityalliance.org/research/cloud-controls-matrix/"});" href="https://cloudsecurityalliance.org/research/cloud-controls-matrix/">CCM</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"CAIQ - https://cloudsecurityalliance.org/research/cloud-controls-matrix/"});" href="https://cloudsecurityalliance.org/research/cloud-controls-matrix/">CAIQ</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"STAR - https://cloudsecurityalliance.org/star/"});" href="https://cloudsecurityalliance.org/star/">STAR</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"GDPR - https://cloudsecurityalliance.org/privacy/gdpr/"});" href="https://cloudsecurityalliance.org/privacy/gdpr/">GDPR</a></div></div><div class="o-grid__cell"><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"About CSA - https://cloudsecurityalliance.org/about/"});" href="https://cloudsecurityalliance.org/about/">About CSA</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Contact Us - https://cloudsecurityalliance.org/contact/"});" href="https://cloudsecurityalliance.org/contact/">Contact Us</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Press Releases - https://cloudsecurityalliance.org/press-releases/"});" href="https://cloudsecurityalliance.org/press-releases/">Press Releases</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Affiliates - https://cloudsecurityalliance.org/membership/current-affiliates/"});" href="https://cloudsecurityalliance.org/membership/current-affiliates/">Affiliates</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Press Coverage - https://cloudsecurityalliance.org/press-coverage/"});" href="https://cloudsecurityalliance.org/press-coverage/">Press Coverage</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Quality Policy - https://cloudsecurityalliance.org/quality-policy/"});" href="https://cloudsecurityalliance.org/quality-policy/">Quality Policy</a></div><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Our Team - https://cloudsecurityalliance.org/about/csa-staff/"});" href="https://cloudsecurityalliance.org/about/csa-staff/">Our Team</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Board of Directors - https://cloudsecurityalliance.org/about/board-of-directors/"});" data-turbo="false" href="https://cloudsecurityalliance.org/about/board-of-directors/">Board of Directors</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Management \u0026 Staff - https://cloudsecurityalliance.org/about/csa-staff/"});" data-turbo="false" href="https://cloudsecurityalliance.org/about/csa-staff/">Management & Staff</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Careers - https://cloudsecurityalliance.org/about/careers"});" href="https://cloudsecurityalliance.org/about/careers">Careers</a></div><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Legal - https://cloudsecurityalliance.org/legal/"});" href="https://cloudsecurityalliance.org/legal/">Legal</a></h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Privacy Notice - https://cloudsecurityalliance.org/legal/privacy-notice/"});" href="https://cloudsecurityalliance.org/legal/privacy-notice/">Privacy Notice</a><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Terms \u0026 Conditions - https://cloudsecurityalliance.org/legal/website-terms-and-conditions/"});" href="https://cloudsecurityalliance.org/legal/website-terms-and-conditions/">Terms & Conditions</a></div><div class="c-footer__list"><h6><a onclick="gtag('event', 'sitewide_menu_click', {"event_category":"footer_menu","event_label":"Cloud Security Glossary - https://cloudsecurityalliance.org/cloud-security-glossary/"});" href="https://cloudsecurityalliance.org/cloud-security-glossary/">Cloud Security Glossary</a></h6></div></div></div></div></div></div></div><div class="u-scroll-to-top"><span class="c-button c-button--primary c-button--elevated">&utrif;</span></div></div></footer><div class="c-modal"><div class="c-modal__content"></div><span class="c-modal__close-button"></span></div> <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=2121b371-8db3-4beb-8ca2-5e994ec5fb73"></script> <script type="text/javascript"> var isDesktop = true; // device detection if(/(android|bb\d+|meego).+mobile|avantgo|bada\/|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od)|ipad|iris|kindle|Android|Silk|lge |maemo|midp|mmp|netfront|opera m(ob|in)i|palm( os)?|phone|p(ixi|re)\/|plucker|pocket|psp|series(4|6)0|symbian|treo|up\.(browser|link)|vodafone|wap|windows (ce|phone)|xda|xiino/i.test(navigator.userAgent) || /1207|6310|6590|3gso|4thp|50[1-6]i|770s|802s|a wa|abac|ac(er|oo|s\-)|ai(ko|rn)|al(av|ca|co)|amoi|an(ex|ny|yw)|aptu|ar(ch|go)|as(te|us)|attw|au(di|\-m|r |s )|avan|be(ck|ll|nq)|bi(lb|rd)|bl(ac|az)|br(e|v)w|bumb|bw\-(n|u)|c55\/|capi|ccwa|cdm\-|cell|chtm|cldc|cmd\-|co(mp|nd)|craw|da(it|ll|ng)|dbte|dc\-s|devi|dica|dmob|do(c|p)o|ds(12|\-d)|el(49|ai)|em(l2|ul)|er(ic|k0)|esl8|ez([4-7]0|os|wa|ze)|fetc|fly(\-|_)|g1 u|g560|gene|gf\-5|g\-mo|go(\.w|od)|gr(ad|un)|haie|hcit|hd\-(m|p|t)|hei\-|hi(pt|ta)|hp( i|ip)|hs\-c|ht(c(\-| |_|a|g|p|s|t)|tp)|hu(aw|tc)|i\-(20|go|ma)|i230|iac( |\-|\/)|ibro|idea|ig01|ikom|im1k|inno|ipaq|iris|ja(t|v)a|jbro|jemu|jigs|kddi|keji|kgt( |\/)|klon|kpt |kwc\-|kyo(c|k)|le(no|xi)|lg( g|\/(k|l|u)|50|54|\-[a-w])|libw|lynx|m1\-w|m3ga|m50\/|ma(te|ui|xo)|mc(01|21|ca)|m\-cr|me(rc|ri)|mi(o8|oa|ts)|mmef|mo(01|02|bi|de|do|t(\-| |o|v)|zz)|mt(50|p1|v )|mwbp|mywa|n10[0-2]|n20[2-3]|n30(0|2)|n50(0|2|5)|n7(0(0|1)|10)|ne((c|m)\-|on|tf|wf|wg|wt)|nok(6|i)|nzph|o2im|op(ti|wv)|oran|owg1|p800|pan(a|d|t)|pdxg|pg(13|\-([1-8]|c))|phil|pire|pl(ay|uc)|pn\-2|po(ck|rt|se)|prox|psio|pt\-g|qa\-a|qc(07|12|21|32|60|\-[2-7]|i\-)|qtek|r380|r600|raks|rim9|ro(ve|zo)|s55\/|sa(ge|ma|mm|ms|ny|va)|sc(01|h\-|oo|p\-)|sdk\/|se(c(\-|0|1)|47|mc|nd|ri)|sgh\-|shar|sie(\-|m)|sk\-0|sl(45|id)|sm(al|ar|b3|it|t5)|so(ft|ny)|sp(01|h\-|v\-|v )|sy(01|mb)|t2(18|50)|t6(00|10|18)|ta(gt|lk)|tcl\-|tdg\-|tel(i|m)|tim\-|t\-mo|to(pl|sh)|ts(70|m\-|m3|m5)|tx\-9|up(\.b|g1|si)|utst|v400|v750|veri|vi(rg|te)|vk(40|5[0-3]|\-v)|vm40|voda|vulc|vx(52|53|60|61|70|80|81|83|85|98)|w3c(\-| )|webc|whit|wi(g |nc|nw)|wmlb|wonu|x700|yas\-|your|zeto|zte\-/i.test(navigator.userAgent.substr(0,4))) { isDesktop = false; } window.zESettings = { webWidget: { color: { launcherText: '#FFFFFF' } } }; var customizeWidget = function () { // Dodge Recaptcha when it also exists on the page if (typeof grecaptcha !== 'undefined') { $('#launcher').animate({'margin-right': '80px'}); }; }; setTimeout(customizeWidget, 2000); </script> </body></html>

CINXE.COM

STAR | CSA