WELCOME TO THE CONTINUITY CENTRAL ARCHIVE SITE

Please note that this is a page from a previous version of Continuity Central and is no longer being updated.

To see the latest business continuity news, jobs and information click here.

Business continuity information

Cloud Security Alliance announces that it is working with BSI on Open Certificate Framework for cloud providers

The Open Certification Framework will help provide cloud users with assurances on risk management, security and resilience.

The Cloud Security Alliance (CSA) has announced that it has made a partnership agreement with BSI (British Standards Institution) to help ensure that CSA’s Open Certification Framework is in line with international standards and is based upon a comprehensive certification process.

The CSA Open Certification Framework is an industry initiative that will offer cloud providers a trusted global certification scheme. This flexible three-stage scheme will be created in line with the CSA’s security guidance and control objectives. The program will support an independent third-party assessment, as well as attestation statements developed within the public accounting community.

The Open Certification Framework is being structured in three levels, each one of them providing an incremental level of trust and transparency to the operations of cloud service providers and a higher level of assurance to the cloud consumer.

  • The initial level is CSA STAR Self Assessment: Cloud providers can submit reports to the CSA STAR Registry to indicate their compliance with CSA best practices. This option is available immediately.
  • The second level, CSA STAR CERTIFICATION, is a third-party independent assessment: this certification leverages the requirements of the ISO/IEC 27001:2005 management systems standard together with the CSA Cloud Control Matrix (CCM). These assessments will be conducted by approved certification bodies only. Availability is expected in the first half of 2013.
  • The STAR Certification will be enhanced in the future by continuous monitoring-based certification: this third level is currently under development.

http://cloudsecurityalliance.org/research/ocf/

•Date: 21st August 2012 • UK/World •Type: Article • Topic: Cloud computing

Business Continuity Newsletter Sign up for Continuity Briefing, our weekly roundup of business continuity news. For news as it happens, subscribe to Continuity Central on Twitter.
   

How to advertise How to advertise on Continuity Central.

To submit news stories to Continuity Central, e-mail the editor.

Want an RSS newsfeed for your website? Click here