Certifying to CSA STAR Certification
Show clients that you have addressed specific issues relating to cloud security as an enhancement to your ISO/IEC 27001 certification. CSA STAR Certification can boost customer and stakeholder confidence, enhance your corporate reputation and give your business a competitive advantage.
How to get CSA STAR Certification
We make the certification process straightforward. After we have received your application we appoint a client manager, with the skill set to match your organization, to guide your business through the following steps:
- Gap analysis
This is an optional pre-assessment service where we take a closer look at your existing system and compare it with the CSA STAR Certification requirements. This helps identify areas that need more work before we carry out a formal assessment, saving you time and money. - Formal assessment
BSI will assess your cloud controls in a formal assessment usually as part of your ISO/IEC 27001 assessment. At this stage you will be awarded a Gold, Silver or Bronze rating depending on the level of maturity of your system. - Certification and beyond
When you have passed the formal assessment you will receive a STAR certificate, which is valid for three years. And your company will also appear on the STAR registry held by the CSA although for confidentiality purposes the level awarded will not be divulged. You may share that upon request. Your client manager will stay in touch during this time, paying you regular visits to make sure your system doesn’t just remain compliant, but that it continually improves.
CSA STAR 认证有何收益？
无论公司规模大小，都能从 CSA STAR 认证中获益匪浅。鉴于越来越多的客户要求公司提供云安全控制措施的证明，CSA STAR 认证将为您提升客户信心和公司声誉，赢得更多新业务。对于云服务提供商，CSA STAR 认证有以下优势：
- 为管理层提供可视化信息，以便其评估其管理体系是否符合 ISO/IEC 27001 标准与云安全行业的要求
- 实施度身定制的审核工作，反映组织优化云服务的目标完成情况
- 通过外部认证机构的独立评级，展示项目进展和绩效水平
- 比较您与同行的表现
此外，CSA STAR 认证还有助于云服务提供商更深入地了解其安全控制措施的落实情况。
BSI - 与您一路同行的合作伙伴
100 多年前，我们开创先河，建立标准，如今我们引领市场。我们服务于全球 182 个国家的 8 万多家客户，从全球顶级品牌到雄心勃勃的小公司，帮助他们在激烈的竞争中脱颖而出。作为全球名列前茅的标准权威机构，BSI 不仅评估您是否满足标准，还可为您定制新标准，并在全球范围内培训团队使用标准，完善其表现。我们的专业知识，将为您的组织变革提供助力。
