QuestionQ45

VerifiedSTAR Program

What is the BEST method for reporting continuous assessment of a cloud provider’s services to the Cloud Security Alliance (CSA)?

Explanation

Dedicated APIs can provide automated, ongoing access to assessment data, supporting more timely reporting than periodic third-party assessments or SOC 2 Type 2 reports. Continuous assessment also requires processes that repeatedly validate the relevant controls; an API by itself does not perform that assessment. (cloudsecurityalliance.org)

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!