CSA STAR

cloudgovernance & risk

Stands for: CSA Security, Trust, Assurance and Risk registry

The Cloud Security Alliance's public registry of cloud-provider security postures - self-assessment through third-party certification.

STAR (Security, Trust, Assurance and Risk) builds on the CSA Cloud Controls Matrix: Level 1 is a published self-assessment, Level 2 adds third-party certification (often paired with ISO 27001), all mapped to leading standards. It is the transparency layer of cloud compliance, letting buyers compare providers against one cloud-specific control framework - and it ties every vendor trust center back to the CSA.

Also known as: csa star, star registry, star certification, star level 2

← All glossary entries