The CSA STAR Certification is based on criteria outlined the Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) in addition to:

The CSA STAR Certification is based on criteria outlined in the Cloud Security Alliance (CSA) Cloud

Controls Matrix (CCM) in addition to ISO/IEC 27001 implementation. The CCM is a cybersecurity

control framework for cloud computing that covers 17 domains and 197 control objectives that

address all key aspects of cloud technology. ISO/IEC 27001 is a standard for information security

management systems that specifies the requirements for establishing, implementing, maintaining,

and continually improving an information security management system within the context of the

organization. The CSA STAR Certification demonstrates that a cloud service provider conforms to the

applicable requirements of ISO/IEC 27001, has addressed issues critical to cloud security as outlined

in the CCM, and has been assessed against the STAR Capability Maturity Model for the management

of activities in CCM control areas1. The CSA STAR Certification is a third-party independent

assessment of the security of a cloud service provider and provides a high level of assurance and

trust to customers2.

Reference:

CSA STAR Certification - Azure Compliance | Microsoft Learn

STAR | CSA