Register

What is the Cloud Security Alliance STAR Program?

The Cloud Security Alliance (CSA) is a global not-for-profit organization dedicated to defining and raising awareness of best practices for secure cloud computing.


The CSA STAR (Security, Trust, Assurance, and Risk) program is a globally recognized cloud assurance framework that promotes transparency and best practices for cloud providers.


At the heart of STAR is the Cloud Controls Matrix (CCM)—a comprehensive set of security controls mapped to major international standards. The Consensus Assessments Initiative Questionnaire (CAIQ) is a standardized self-assessment tool for cloud providers to document their security controls and practices against the CCM.


Exoscale’s completed CAIQ is available to customers and partners in our Compliance Center, and published on the CSA STAR Registry for full transparency.

FAQ

Who can use the Cloud Controls Matrix?

The CCM is used by cloud service providers to benchmark and improve their security controls, and by cloud customers to assess provider risk, compare services, and satisfy due diligence or regulatory requirements.

Both providers and customers benefit from a standardized approach to cloud security, enabling more efficient and transparent vendor assessments.

Exoscale

Contact our Compliance Team

Need our CAIQ, details on STAR participation, or support with your cloud risk assessments? Contact our Compliance Team—we’re happy to help with all your cloud security questions.