CCAK · Question #17
The Open Certification Framework is structured on three levels of trust. Those three levels of trust are:
The correct answer is D. CSA STAR Self-Assessment, STAR Certification & Attestation (Third-party Assessment), STAR. The CSA Open Certification Framework (OCF) - the foundation of the STAR (Security, Trust, Assurance, and Risk) program - is structured around three tiers of assurance. Level 1 is STAR Self-Assessment, where providers self-report their security posture using the CSA Consensus…
Question
The Open Certification Framework is structured on three levels of trust. Those three levels of trust are:
Options
- ACSA STAR Self-Assessment, STAR Certification & Attestation (Third-party Assessment), STAR
- BCSA STAR Audit, STAR Certification & Attestation (Third-party Assessment), STAR Continuous
- CCSA STAR Self-Assessment, STAR Certification & Attestation (Third-party Assessment), STAR
- DCSA STAR Self-Assessment, STAR Certification & Attestation (Third-party Assessment), STAR
How the community answered
(29 responses)- B3% (1)
- C3% (1)
- D93% (27)
Explanation
The CSA Open Certification Framework (OCF) - the foundation of the STAR (Security, Trust, Assurance, and Risk) program - is structured around three tiers of assurance. Level 1 is STAR Self-Assessment, where providers self-report their security posture using the CSA Consensus Assessments Initiative Questionnaire (CAIQ) or CCM. Level 2 is STAR Certification & Attestation, a third-party assessment where an independent auditor validates the provider's controls against ISO 27001 or SOC 2 mapped to CCM. Level 3 is STAR Continuous Monitoring, which provides real-time, ongoing assurance using automated monitoring rather than point-in-time audits. The levels progressively increase rigor and trust.
Topics
Community Discussion
No community discussion yet for this question.