Hi everyone,
Here's a link to the latest blog from CSA's CEO Jim Reavis, "Modernizing Assurance for Cloud and Beyond": https://cloudsecurityalliance.org/blog/2023/02/28/modernizing-assurance-for-cloud-and-beyond/
A short excerpt: "The pace of technological innovation and cloud's ability to be procured, provisioned and scaled on demand puts tremendous pressure on the security assurance and compliance functions within both cloud service providers and cloud customers... The core challenge is delivering the requisite assurance at a pace that satisfies the business. The need is for both stakeholders to reduce redundant assurance activities to enable agility and focus on raising the bar for security.
To address that problem statement, the industry needs standardized, universal approaches to cloud assurance that are recognized globally, can be customized for relevant risks easily, and are rapidly updated to address evolving assurance needs. At CSA our portfolio of capabilities is called STAR - the Security, Trust, Assurance & Risk Program."
Jim goes on to explain the different facets of STAR, including CCM, CAIQ, the STAR Registry, STAR Enabled Solutions, CCAK, and STAR Extended Services.
------------------------------
Megan Theimer
Content Coordinator
Cloud Security Alliance
------------------------------