Securisea is a Certified STAR Attestation Auditor recognized by the Cloud Security Alliance, qualified to perform STAR Level 2 attestation engagements. Our CSA STAR attestations evaluate your cloud security controls against the SOC 2 Trust Services Criteria and the CSA Cloud Controls Matrix (CCM), providing independent assurance that builds customer trust in your cloud services.
Our CCSK-certified assessors perform CSA STAR Attestation as a SOC 2+ engagement, incorporating the Cloud Controls Matrix as additional criteria alongside SOC 2 Trust Services Criteria. This combined approach leverages overlapping controls and audit evidence, reducing redundant testing and shortening your compliance timeline.
CSA STAR Attestation Process
1
Readiness Assessment
We evaluate your cloud service controls against the CSA Cloud Controls Matrix (CCM) control specifications and identify gaps relative to STAR program criteria.
2
Advisory
Support
We provide recommendations to help your team address identified gaps. Your organization retains full responsibility for all remediation decisions and implementation. Advisory services are performed independently of the attestation engagement.
3
Attestation & Registry Submission
Our CPA firm, Securisea Attest, performs the formal SOC 2 + CCM examination engagement and issues your STAR Attestation report. We submit the completed assessment to the CSA STAR Registry on your behalf and advise on annual re-evaluation timing and requirements.
