Gain a competitive advantage with CSA STAR certification
CSA STAR (Cloud Security Alliance Security Trust Assurance and Risk Registry) assessments use an assurance framework that enables cloud service providers (CSP) to assess cloud-specific controls within their existing compliance program.
As a CSA STAR assessor, A-LIGN can help ensure your organization is included on the CSA STAR registry with an attestation or certification.
The benefits of CSA STAR assessments:
- Demonstrates your organization’s capabilities and maturity relative to the security controls of its cloud service offering
- Validates that your organization takes measures to demonstrate your security capabilities
- Provides peace of mind for new and existing customers that their information is protected and secure
CSA STAR services
- SOC 2 + CSA STAR Attestation
- ISO 27001 + CSA STAR Certification
SOC 2 + CSA STAR Attestation
We perform a SOC 2 assessment using Trust Service Criteria outlined by AICPA in combination with the CSA Cloud Controls Matrix. The CSA STAR Attestation will result in either a Type 1 or Type 2 SOC 2 + CSA STAR Attestation report which is valid for six months or one year, respectively, from the date of completion.
ISO 27001 + CSA STAR Certification
We conduct a rigorous third-party independent assessment of CSPs who are undergoing ISO 27001 certification using a combination of the ISO/IEC 27001: 2013 management standards and the CSA Cloud Controls Matrix. This approach will result in an ISO 27001 + CSA STAR Certification which is valid for three years from completion.