ISO/IEC 27017 & 27018
Cloud security and cloud privacy controls on top of ISO/IEC 27001.
Learn moreGive cloud customers the assurance they ask for. We prepare your cloud service for the Cloud Security Alliance STAR programme, from the self-assessment to third-party certification.
The Security, Trust, Assurance and Risk (STAR) programme from the Cloud Security Alliance is a public registry of cloud security assurance. It is built on the Cloud Controls Matrix (CCM), a control framework for cloud computing, and the Consensus Assessments Initiative Questionnaire (CAIQ).
STAR has levels: a self-assessment published to the registry, and third-party audits such as STAR Certification, which builds on ISO/IEC 27001. Many enterprise customers check the STAR registry when choosing cloud providers.
Every engagement follows the Cyber Shields rhythm: Assess, Protect, Monitor. For this engagement, that translates into the following steps.
Findings are anchored to recognized frameworks so they are defensible and cross-mappable.
The documents behind this page, linked at the publisher. Where a Saudi regulation is published in both languages, the Arabic text is the binding version.
Every engagement is scoped individually. Pricing depends on the size and complexity of your environment, the systems or controls in scope, and the timeline you need to work to. Rather than publish figures that rarely fit a specific situation, we prepare a written proposal with a clear fee and schedule once your scope is understood.
Tell us about your organization and the deadline you are working toward, and we will return a tailored proposal within five business days, following a signed Non-Disclosure Agreement.
Most providers start with the self-assessment, then move to third-party certification as customer demand grows.
Yes. A published CAIQ answers many standard questions up front.
No. Certificates are issued by accredited certification bodies. We prepare you so that the certification audit goes smoothly, and we can help you choose a certification body.
Yes. Reports, the executive summary, and the readout session are available in both Arabic and English at no additional cost.
Cloud security and cloud privacy controls on top of ISO/IEC 27001.
Learn moreCloud Cybersecurity Controls for cloud service providers and tenants, extending your ECC posture into the cloud.
Learn moreImplementation and certification readiness for an Information Security Management System recognised by partners and clients worldwide.
Learn moreWho the CCC applies to, what changed in 2024, and how cloud tenants and providers prepare.
Read the articleTell us about your cloud service and we will return a written proposal within five business days. NDA first, always.