CSA STAR

The CSA Security Trust Assurance and Risk (STAR) program verifies cloud maturity at three levels:
- Level one: Self-assessment
- Level two: Third-party audit
- Level three: Continuous auditing
As experienced information security auditors, we can help you leverage best practices and meet the requirements of the CSA STAR program at every level.
Whether you need help assessing and documenting your security protocols or would like NSF-ISR to conduct a third-party audit of your cloud security system, our team offers technical expertise in assessing both physical and logical cybersecurity and information security environments.
With more than 10 years of industry experience, our lead auditors provide your organization with the deep industry knowledge you need to improve your data security. Our auditing services also help your organization reduce security risks, improve business performance, address customer expectations and meet or exceed corporate and organizational security objectives.
Throughout the process, you'll work closely with a single point of contact for easy communication and scheduling. Start the CSA STAR auditing and certification process and learn why NSF-ISR's clients are consistently satisfied with our customer service.
Resources

NIST 800-171 Rev 3 Class Deviation for Controlled Unclassified Information
ArticleThe National Institute of Standards and Technology published updated requirements for the handling of Controlled Unclassified Information. Contractors working with the Department of Defense, however, have been exempted from their application.
Preventing a Data Breach
ArticleIs your company data adequately protected? Is your Incident Response Plan up to scratch? NSF’s Information Security experts, together with the Principal of Cybersecurity at Plante Moran, share the most common causes of data breaches and some steps you can take to help protect your company’s data.
Building Information Security Policies With Ease
ArticleIf you’re looking to get started on your Information Security journey, but your resources are limited, keep reading this article to learn how you can easily generate and score your information security policies.
How NSF Can Help You
