Browse Resources
![]() | Value of STAR Level 2 for Cloud Customers - Letter Template Release Date: 03/09/2023 Use this letter template to explain to a customer why your organization decided to use STAR Level 2 Certification or Attestation to minimize multiple cust... Request to download |
![]() | Release Date: 02/01/2023 A STAR Enabled Solution is a product or service that utilizes the CCM framework or the Consensus Assessment Initiative Questionnaire (CAIQ). Their technol... Request to download |
![]() | Deconstructing Application Connectivity Challenges in a Complex Cloud Environment Release Date: 12/14/2022 The production and use of SaaS applications in organizations has grown exponentially over the past several years. Application Security has become an integ... Request to download |
![]() | Release Date: 10/04/2022 This document is an addendum to the CCM V4.0 that contain controls mapping between the CSA CCM and Japan's Information System Security Management and Asse... Request to download |
Accedere: Using a SOC 2 Approach to Help Organizations Achieve CSA STAR Level 2 Release Date: 09/19/2022 Cybersecurity frameworks, standards and certifications can be quite complicated to understand, making it difficult to identify which standard an organizat... Request to download | |
![]() | Flowchart for Becoming a CSA STAR Accredited Assessment Firm Release Date: 09/13/2022 Download this flowchart to see the steps needed to become a CSA STAR Accredited Assessment Firm. Request to download |
Case Study: Integrating Third-Party Assessments and Regulations with CSA STAR and TokenEx Release Date: 03/23/2022 TokenEx is a leading data protection and tokenization platform, founded in 2010. They have completed the CSA STAR Level 1: Security Self-Assessment, docum... Request to download | |
![]() | Release Date: 03/21/2022 Download this graph for an overview of the steps your organization will need to take to submit to the CSA STAR registry for both level 1 and level 2. Request to download |
![]() | Release Date: 03/17/2022 Compliance requires a comprehensive review of services and processes related to cloud infrastructure and how it is managed during a data lifecycle. STAR f... Request to download |
STAR Level 1: Security Questionnaire (CAIQ v4) - Japanese Translation Release Date: 11/02/2021 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download | |
CCM and CAIQ v4 - Chinese Translations Release Date: 10/26/2021 This localized version of this publication was produced from the original source material (CCM, CAIQ) through the efforts of local organizations and the C... Request to download | |
CCM and CAIQ v4 -Japanese Translations Release Date: 10/26/2021 This localized version of this publication was produced from the original source material (CCM, CAIQ) through the efforts of chapters and volunteers but t... Request to download | |
Release Date: 10/26/2021 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download | |
Release Date: 10/26/2021 This localized version of this publication was produced from the original source material (CCM, CAIQ) through the efforts of local organizations and the C... Request to download | |
CCM v4 - Hungarian Translation Release Date: 10/19/2021 This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translate... Request to download | |
![]() | Code of Practice for Implementing STAR Level 2 Release Date: 06/23/2021 This Code of Practice shows how you can apply the CCM control set in your organization to reach STAR Level 2 third party certification/attestation and als... Request to download |
STAR Level 1: Security Questionnaire (CAIQ v4) Release Date: 06/07/2021 The STAR Level 1: Security Questionnaire (CAIQ v4) offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services,... Request to download | |
![]() | STAR Enabled Solution | CSA - OneTrust VRM Tool Release Date: 05/05/2021 The CSA-OneTrust Vendor Risk Management (VRM) tool automates the entire vendor management lifecycle, including onboarding and offboarding vendors, triaging v... Request to download |
![]() | CSA STAR Level 3 Focus Group Charter Release Date: 04/02/2021 The CSA STAR Level 3 Focus Group will advise on the scope, objectives, structure, go-to-market (GTM) strategy and value proposition for STAR Level 3... Request to download |
![]() | CSA STAR Certification Intake Form Release Date: 01/01/2021 The CSA STAR Certification is a rigorous third party independent assessment of the security of a cloud service provider. The technology-neutral certification... Request to download |










