RINA becomes Solution Provider for the Cloud Security Alliance (CSA)

22 Dec 2023

The CSA STAR Level 2 certification for all companies that provide cloud services

RINA is the first Italian Certification Body to join the international non-profit association Cloud Security Alliance (CSA), created with the aim of developing and promoting good practices, training and certifications for cloud computing security. Thanks to this important membership, we are now able to certify all companies that provide cloud services according to the CSA STAR Level 2 scheme.

STAR stands for Security, Trust, Assurance and Risk and is a governance, compliance and accountability framework dedicated to the security and transparency of the cloud computing services market. The use of the Cloud Control Matrix (CCM) makes it possible to integrate the security controls of an already ISO/IEC 27001 certified management system with specific cloud security controls for all IaaS, PaaS and SaaS service modes and to measure the "maturity" of the security controls implemented by the organization, according to a three-level scale.

As required by the National Cybersecurity Agency, all public or private entities in Italy that intend to qualify as "cloud service providers" of the Public Administration for the processing of "strategic" data, are required to have the CSA STAR Level 2 certification.

Danilo Diomede, Cyber & IT Product Manager said: "The pervasive development of cloud computing for the provision of highly critical services in terms of security (health, banking/insurance, telecommunications, and others), requires at the same time an evolution in the treatment of information risks through specialized models capable of measuring continuous improvement, which take into account above all the peculiarities of the "cloud world". The Cloud Security Alliance, by developing dedicated projects and certification schemes, is giving a significant response to this need, which RINA adheres to support its customers in positioning themselves on the market with a reliable and competitive cloud offer."

Would you like to find out more about our certification solutions in the cyber & IT field?