Microsoft and CSA STAR Certification
Microsoft Azure, Microsoft Intune, and Microsoft Power BI have obtained STAR Certification, which involves a rigorous independent third-party assessment of a cloud provider’s security posture. This STAR certification is based on achieving ISO/IEC 27001 certification and meeting criteria specified in the CCM. It demonstrates that a cloud service provider conforms to the applicable requirements of ISO/IEC 27001, has addressed issues critical to cloud security as outlined in the CCM, and has been assessed against the STAR Capability Maturity Model for the management of activities in CCM control areas.
During the assessment, an accredited CSA certification auditor assigns a Maturity Capability score to each of the 16 CCM control areas. The average score is then used to assign the overall level of maturity and the corresponding Bronze, Silver, or Gold award. Azure, Intune, Power BI, and Microsoft Cloud App Security were awarded Cloud Security Alliance (CSA) STAR Certification at the Gold level.
Learn about the benefits of CSA STAR Certification on the Microsoft Cloud.
Download the CSA STAR Certification backgrounderLearn how to accelerate your CSA STAR Certification deployment with our Azure Security and Compliance Blueprints.
Download the Microsoft Azure Responses to CSA Consensus Assessments Initiative QuestionnaireMicrosoft in-scope cloud services
CSA STAR Certification Overview
The Cloud Security Alliance (CSA) maintains the Security, Trust & Assurance Registry (STAR), a free, publicly accessible registry where cloud service providers can publish their CSA-related assessments. STAR consists of three levels of assurance aligned with the control objectives in the CSA Cloud Controls Matrix (CCM). (The CCM covers fundamental security principles across 16 domains to help cloud customers assess the overall security risk of a cloud service.)
- Level 1: STAR Self-Assessment
- Level 2: STAR Certification, STAR Attestation, and C-STAR Assessment
- Level 3: STAR Continuous Monitoring (program requirements are still under development by CSA)
Manage your compliance from one place
Perform ongoing risk assessment, get actionable insights, and simplify your compliance process when using Microsoft cloud services with Compliance Manager.
Try Compliance Manager nowRead the Security, Privacy and Compliance blog
Frequently asked questions
Recommended Resources
Featured resources
- Azure standard response for request for information
- Azure Cloud Security Alliance CAIQ
- Office 365 Mapping of CSA Cloud Control Matrix
- Cloud Security Alliance
- CSA Security, Trust & Assurance Registry (STAR)
- About CSA STAR certification
- Cloud Controls Matrix (CCM)
- ISO/IEC 27001
- Microsoft Common Controls Hub Compliance Framework