Although cloud adoption is gathering pace, many organisations remain wary of cloud services due to concerns around information security and privacy, with industry research suggesting that 56% of companies are still reluctant to migrate to the cloud due to concerns about data security flaws. The Cloud Security Alliance (CSA) is at the forefront of developing best practice in cloud computing. They worked with industry to develop a matrix of security measures and, in partnership with BSI, launched the STAR Certification scheme, comprising an independent third-party assessment of the security capabilities of cloud service providers. The new certification leverages the requirements of the global information security management standard ISO 27001, together with the CSA’s matrix of controls to address the unique security requirements demanded by customers of CSPs. In this way, it helps to address security issues specific to the cloud, and give customers of cloud services a greater understanding of the level of security in place.
The certification, issued by BSI, provides reassurance to customers and partners of Exponential-e’s competency to deliver cloud services.
Lee Wade, Exponential-e CEO commented: “We are extremely proud to be the first CSP to have achieved CSA Star Certification following a long and demanding audit process. We have been working for years to highlight and counteract the perception amongst enterprises that cloud services are not secure. Few CSPs can deliver the same model that Exponential-e is capable of and this cloud specific security certification, that complements our ISO 27001 certification, will provide our customers with the extra confidence that their data is fully protected within the Exponential-e cloud.”
Suzanne Fribbins, Risk Management Specialist at BSI adds “Exponential-e has shown great dedication to become early adopters of CSA Star Certification and should be extremely proud of this achievement. As the new industry benchmark for cloud security best practice, CSA Star Certification is a great addition to Exponential-e’s existing array of management system certifications. It reinforces their commitment to continually improve business performance and importantly reassures existing and prospective clients that specific cloud security risks have been addressed.”
Jitesh Bavisi, Exponential-e’s Director of Compliance added: “We have always taken pride in our business management systems, the framework of which is built around our ISO 9001, ISO 27001, ISO 20000 and PCI- DSS certification’s. Achieving the CSA Star Certification is another significant step forward which enables us to offer our customers a greater level of assurance for our cloud services.“