top of page

Cloud Security Assurance: CSA STAR and ISO 27017/27018

IDEAL FOR:

SaaS and cloud service providers whose customers ask for proof of security.

Organizations moving key systems to Microsoft 365, AWS, Azure or Google Cloud.

ISO 27001-certified firms adding cloud and privacy controls.

ON-SITE
REMOTE

DESCRIPTION

Prove your cloud is secure. We assess and strengthen your cloud governance against the Cloud Security Alliance's Cloud Controls Matrix and STAR programme, aligned to ISO/IEC 27017 and 27018. It's for organizations that run on the cloud or sell cloud services. It's led by a CCSK, CISSP and CISA-certified consultant, with an AWS Certified Solutions Architect on the team for AWS environments.

BENEFITS

  • Cloud controls assessment against the CSA Cloud Controls Matrix.

  • Shared-responsibility mapping with your cloud providers.

  • CSA STAR Level 1 self-assessment prepared for publication.

  • ISO 27017 and 27018 controls added to your ISMS.

  • Readiness for a STAR Level 2 or ISO 27017/27018 audit.

  • Plain-English answers to customer cloud-security questions.

HOW IT RUNS

  • Cloud inventory and shared-responsibility review (weeks 1–2).

  • Controls assessment against the CSA CCM (weeks 2–5).

  • Remediation plan and STAR Level 1 submission (weeks 5–8).

  • Audit readiness support, if certifying (weeks 8–12).

bottom of page