CSA STAR

The Cloud Security Alliance registry where cloud providers publish their security controls, self-assessed or independently audited against the Cloud Controls Matrix.

A customer can read a provider's answers before signing, instead of sending its own questionnaire. Level one is a self-assessment, and level two adds a third-party audit or certification. It complements reports such as SOC 2 and certifications such as ISO/IEC 27001.