Guide for Submitting Level 2 Certifications

How to Submit Level 2 Certifications to the STAR Registry

• This guide is intended for Certification Bodies who are submitting their Certifications on behalf of STAR registry Organizations. If you are from an Organization interested in becoming STAR Certified, you can find information via the following links:

  Cloud Security Alliance - Levels of STAR

  Code of Practice for Implementing STAR Level 2

  
  

  Please be aware that the Certification process should be completed by the Auditor performing the audit on behalf of the Organization. STAR Registry users may not submit their own Certification.

  In this document we will give you the following guidance:

• Preparation for submitting the Level 2 Certifications
• Instructions for submitting the Level 2 Certifications
• More information about the form field information

Preparation for submitting a Level 2 Certification

The STAR Registry Certification Submission form can be found here.

Note: Organizations must have completed a Level 1 Self-Assessment submission prior to submitting a STAR Certification. STAR Self-Assessments can be  submitted through our STAR Submission form here. You can view the documentation for submitting Level 1 Submissions here.

You will want to ensure that you have the following information gathered in order to complete the submission. 

STAR Certification Checklist (to be completed by the auditor):

• Your Company
• Your Name
• Your Company Phone Number
• Your Company Email
• Your Title
• Your Region
• Your Country
• The Name of the STAR Registry Organization (as it appears in their STAR Registry listing)
• The Organization Contact Name
• The Organization Contact Email
• The Organization Website
• The Organization Description
• The Cloud Service Name (as it appears in the STAR Registry listing)
• The Cloud Service Website
• The Cloud Service Description
• The type of Certification
• The Number of Employees in the Scope of the audit
• The completed Certification Intake-form (This document will be the Primary Document).
• The STAR Certification may be included as a Supporting Document and is not required.

Instructions for submitting your Level 2 Certifications

Step 1. Fill out the STAR Submission form

Navigate to the STAR Registry Certification Submission here and complete the form. 

Attach the STAR Certification Intake form as the primary document. You may add the STAR Certification as a supporting document. However, it is not required.

Step 2. Find the confirmation email

A confirmation notice will come from the email noreply@info.cloudsecurityalliance.org. Check your email for the confirmation notice. If your confirmation email doesn’t arrive within 30 minutes and you are unable to find it in your spam folder, then reach out to us at support@cloudsecurityalliance.org (or click the Support button on the below right of this page) and our support team will assist you with the confirmation step.

Step 3. Confirm you submission

Forward the confirmation notice you received to support@cloudsecurityalliance.org and state that the submission is approved.

You will receive confirmation of the submission with further instructions within five business days.

More information about the fields on the Submission Form

Organization and Cloud Service Name: The Organization and Cloud Service Name must match the name that currently appears in the STAR Registry Listing: https://cloudsecurityalliance.org/star/registry/ 

If the name of the Organization or Cloud Service needs to be updated, an authorized user from the Organization can contact support@cloudsecurityalliance.org to request the update.

Number of Employees in the Scope of the Audit: This is the number of employees who manage the Cloud Service being audited.

The number of employees in the scope of the audit is required for invoicing purposes. Select the appropriate range for the auditee organization.

Document Upload:  Attach the STAR Certification Intake form as the primary document. You may add the STAR Certification as a supporting document. However, it is not required.

Level 1 Self-assessments must be submitted separately and any CAIQ document attached to a Level 2 Certification will be treated as a supporting document and will not result in the posting of a Level 1 Self-assessment.

The posting of the Level 2 Certification to the STAR Registry will result in billing being sent to the Certifying Body Organization.  As an Auditor for STAR Certification, it is your responsibility to collect these fees and inform the organization of these fees before engaging in the Certification process.

 Pricing for STAR Level 2 “Certificate Fees” can be found on our STAR Submission page.

If you need to reach out to us for support, please either use the support button to the right of this page or reach out to us at support@cloudsecurityalliance.org for assistance.