The Cloud Security Alliance (CSA) is a "not‐for‐profit organization with a mission to promote the use of best practices for providing security assurance within Cloud Computing, and to provide education on the uses of Cloud Computing to help secure all other forms of computing." The CSA Consensus Assessments Initiative Questionnaire (CAIQ) is a tool used by cloud service providers to document what security controls exist in their cloud offering in a standardized manner. Cloud services submit the questionnaire to the CSA STAR registry which offers an industry-accepted way to document what security measures exist and to provide security control transparency.
Esri in-scope Services
ArcGIS Online
Esri has been submitting ArcGIS Online CSA answers to the CSA STAR since 2013, with the most recent update being made for the CAIQ 4.0.2 questionnaire. Customers can view ArcGIS Online CSA CAIQ self assessment (STAR Level1) in the Documents section of our ArcGIS Trust Center to ensure their organizational security needs are met.
- ArcGIS Online CSA CAIQ (Public Trust Center document)
EMCS Advanced Plus
EMCS Advanced Plus provides ArcGIS single-tenant deployments securely in the cloud and is offered through Esri Professional Services. Customers can view the EMCS Advanced Plus CSA Cloud Controls Matrix (CCM) answers within the Documents sections of the ArcGIS Trust Center.
- EMCS Advanced Plus CSA CCM (Public Trust Center document)