The Cloud Security Alliance
is a not-for-profit organization with a mission to “promote the use of best practices for
providing security assurance within Cloud Computing, and provide education on the uses of
Cloud Computing to help secure all other forms of computing.”
The CSA’s Security, Trust & Assurance Registry Program (STAR)
is a three-tiered provider assurance program of self-assessment, third-party audit, and
continuous monitoring that aids customers with due diligence of cloud service providers.
Google is a CSA sponsor and a member of CSA’s International Standardization Council
(ISC). The ISC is chartered with coordinating all aspects of the standardization effort in CSA.
Google Cloud (G Suite and the Google Cloud Platform) has completed the CSA STAR Level 1:
Self-Assessment. CSA STAR’s Consensus Assessments Initiative Questionnaire (CAIQ) is
and you can also download STAR documents from the CSA website.