ContrailRisks Advisory Services

ContrailRisks Advisory Services comprise the delivery of cybersecurity, risk management, and governance advisory services using cloud-based collaboration, documentation, and analysis platforms.

The service does not provide hosting, infrastructure, or customer-managed cloud workloads. Instead, ContrailRisks operates as a Cloud Service Customer, leveraging established cloud service providers and endpoint platforms to support secure service delivery, communication, and information handling.

Security, risk, and compliance controls applicable to the service are governed internally through documented policies, procedures, and risk management processes. Technical enforcement of infrastructure, platform, and endpoint controls is implemented through trusted cloud and technology providers under a defined Shared Security Responsibility Model.

This cloud service is covered by the CSA STAR Level 1 self-assessment submitted by ContrailRisks, reflecting a risk-based and proportionate approach to cloud security governance.