CSA STAR Self-Assessment - SITE Cloud Compliance
The Cloud Security Alliance (CSA) Security, Trust, Assurance, and Risk (STAR) registry provides a free, publicly accessible registry for cloud providers to publish information security and compliance reports.
The STAR Self-Assessment allows cloud providers to document their security controls based on the CSA Cloud Controls Matrix (CCM) using the Consensus Assessments Initiative Questionnaire (CAIQ).
SITE Cloud and CSA STAR
SITE Cloud publishes a CSA STAR Self-Assessment documenting its implementation of security controls per the CCM.
Clients can review SITE Cloud's CAIQ to evaluate security risks and compare providers using CSA best practices.
SITE Cloud undergoes annual audits to update the CAIQ assessment based on the latest CCM version.
CAIQ Report Access
The SITE Cloud CSA STAR Self-Assessment is publicly available on the CSA STAR Registry https://cloudsecurityalliance.org/star/registry/saudi-information-technology-company-site
SITE Cloud publishes updated CAIQ reports annually after each audit is completed.
Frequently Asked Questions:
What standards does the CCM align to?
The CCM maps to various security standards like ISO 27001, PCI DSS, and NIST 800-53 to provide a baseline set of cloud security best practices.
Why is the CSA STAR Self-Assessment valuable?
It enables transparent documentation of SITE Cloud's security controls implementation per industry best practices. Customers can review and compare providers.