• Practice using the CSA Cloud Controls Matrix (CCM) for risk evaluation
  • Leveraging the CSA STAR registry to assess cloud service providers
  • Developing criteria for selecting a secure cloud provider based on risk factors