Which registry documents the security and privacy controls of cloud offerings under the Cloud Security Alliance?

Which registry documents the security and privacy controls of cloud offerings under the Cloud Security Alliance?

• A. Reciprocal Agreements
• B. PIPEDA
• C. COPPA
• D. Cloud Security Alliance's Security Trust Assurance and Risk (CSA STAR)

Answer: (D)

CSA STAR is the registry that documents cloud providers’ security and privacy controls. It’s run by the Cloud Security Alliance and ties a provider’s controls to the Cloud Controls Matrix, and it hosts attestations and reports from independent auditors. This creates a transparent, measurable record that customers can use to assess risk and perform due diligence when choosing a cloud service. The other items are privacy laws or unrelated concepts, not a registry of cloud security controls.

CSA STAR is the registry that documents cloud providers’ security and privacy controls. It’s run by the Cloud Security Alliance and ties a provider’s controls to the Cloud Controls Matrix, and it hosts attestations and reports from independent auditors. This creates a transparent, measurable record that customers can use to assess risk and perform due diligence when choosing a cloud service. The other items are privacy laws or unrelated concepts, not a registry of cloud security controls.