Csa Star Certification

Attestation for google cloud platform gcp and g suite resulting in a csa star soc2 report.

Csa star certification. Confidence reputation and new business can come with csa star certification as more customers ask for proof of these measures. Csa star certification brings big benefits to all companies of all sizes. Iso 27001 certification is required and must already be in place or in the process of attaining certification in tandem with the csa star certification. Csa star attestation is a collaboration between the csa and the american institute of cpas aicpa to provide guidance for cpa firms or service auditors to conduct star attestations using criteria from the aicpa trust services principles tsp and the cloud control matrix ccm.

Star certification is based on achieving isoiec 27001 certification and meeting criteria specified in the ccm. Google cloud has achieved the third party assessment based certification csa star level 2. As iso 27001 lead auditors we understand the control requirements and the certification criteria from the registrars. The csa star certification is a rigorous third party independent assessment of the security of a cloud service provider.

The technology neutral certification leverages the requirements of the isoiec 270012013 management system standard together with the csa cloud controls matrix. Star and iso 27001 are tightly aligned with each other. Star level 2 certification provides multiple benefits including indications of best practices and validation of security posture in cloud offerings. They require a series of coordinated efforts to ensure compliance.

Leveraging these resources csps can self assess and publicly document their security controls andor gain csa star certification based on a rigorous third party assessment that encompasses both ccm and iso 27001 requirements. It is awarded after a rigorous third party assessment of the security controls and practices of a cloud service provider. The csa star certification program is not for all csps. For csps that may not have the time or budget for this type of assessment the csa star program may be ruled out.

Google is also a csa sponsor and a member of csas international standardization council isc and a founding member of the csa gdpr center of excellence. Certification certificates follow. Azure cloud app security intune and power bi. The csa star attestation is a third party independent assessment of the security of a csp.

The csa code of conduct for gdpr compliance a tool to help csps comply with the gdpr. Controlcase csa star level 2 certification solution.