Cloud Standards

Resource Type Description Link
CSA STAR Compliance CSA STAR (Security, Trust, Assurance, and Risk) is a comprehensive certification and registry program by the Cloud Security Alliance that evaluates the security and compliance posture of cloud service providers. https://cloudsecurityalliance.org/star
ISO/IEC 27017:2015 Compliance ISO/IEC 27017:2015 is an international standard that provides guidelines for information security controls specifically designed for cloud services, enhancing the security of cloud-based environments for both providers and customers. https://www.iso.org/standard/43757.html
ISO/IEC 27018:2019 Compliance ISO/IEC 27018:2019 is an international standard that establishes guidelines for protecting personally identifiable information (PII) in public cloud environments, ensuring cloud service providers adhere to privacy principles and data protection regulations. https://www.iso.org/standard/76559.html
CIS Benchmark The Center for Internet Security (CIS) is a nonprofit organization that develops best practices, benchmarks, and frameworks to improve cybersecurity, including the widely recognized CIS Controls and CIS Benchmarks for securing systems and networks. https://www.cisecurity.org/cis-benchmarks