Monday, February 10, 2014

STAR Certification will boost confidence in cloud security

The Cloud Security Alliance has teamed up with business standards company ‘BSI Incorporating NCSI’ to create a new standard for security of cloud services and an independent system of certification for conformance to it.

According to Nick Koukoulas, managing director of BSI incorporating NCSI, both users and providers of cloud-based services have been asking for independent, technology-neutral certification to help them make more informed decisions about the services they purchase and use.


.He said that STAR Certification would provide organisations and consumers with a clear benchmark on which to evaluate the performance of a cloud service provider.
The CSA’s STAR Certification combines assessment for conformance to the well-established ISO/IEC 27001:2005 management system standard and the CSA’s CSA Cloud Control Matrix, a specified set of criteria that measures the capability levels of the cloud service.
According to CSA, whilst ISO/IEC 27001 is widely respected there can be a perception that it does not focus in sufficient detail on certain areas of security that are critical for particular sectors such as cloud security. This, it says, is where STAR Certification comes in, by providing a service that sets standards specific to cloud computing security. For complete post see here