STAR Cloud Security Assessment

STAR Cloud Security Assessment is an enhanced version of ISO/IEC 27001, the Information Security Management System. While the standard is widely accepted and respected, its requirements are more general and do not focus on security issues that are critical to specific business domains, such as cloud security. The Cloud Security Alliance, working with an industry working group, has filled this gap by developing the Cloud Control Matrix (CCM), which defines common cloud security-related controls. BSI worked with CSA to develop a new STAR Cloud Security Assessment based on the matrix (STAR Cloud Security Assessment is a certification combining ISO27001 and Cloud Control Matrix CCM), which provides certification to customers based on control measures, with STAR ratings of Gold, Silver or Bronze depending on the degree of integration of the system with the company.

By adopting STAR Cloud Security Assessment as an extension of ISO/IEC 27001 Information Security Management System, you will demonstrate to existing and potential customers that your security system is robust and has addressed specific issues critical to cloud security. The assessment program assists enterprises in adopting cloud services, provides greater transparency and enables cloud service providers (CSP) to increase the confidence of their stakeholders that the necessary controls are in place to ensure data security.

ISO 27001

CCM -Cloud Control Matrix