What happened
Cloud Security Alliance has launched STAR for AI Level 2, a new level of certification that adds third-party-verified AI assurance to its existing STAR framework. This new level combines independent certification with automated analysis through CSA's Valid-AI-ted for AI process. It also aligns with the organisation's AI Controls Matrix, which sets out controls for and risk management.
The programme is aimed at organisations that want to show their AI systems are governed under recognised standards.
It builds on the group's STAR for AI framework and is designed for companies that already hold, or want to combine, certifications tied to information security and AI management.
STAR for AI Level 2 combines independent certification with automated analysis through CSA's Valid-AI-ted for AI process.
It also aligns with the organisation's AI Controls Matrix, which sets out controls for and risk management.
There are three routes to STAR for AI Level 2 certification, depending on an organisation's current assurance status.
Source details: securitybrief.com.au
Why it matters
The launch of STAR for AI Level 2 is significant because it provides a way for organisations to demonstrate responsible governance and effective risk management of their AI systems. This is essential for building trust and enabling sustainable innovation. The new designation is intended to help organisations extend established assurance models from cloud and security into AI oversight.
The launch of STAR for AI Level 2 is significant because it provides a way for organisations to demonstrate responsible governance and effective risk management of their AI systems.
This is essential for building trust and enabling sustainable innovation.
The new designation is intended to help organisations extend established assurance models from cloud and security into AI oversight.
The programme is designed to help businesses show that AI oversight is keeping pace with deployment.
STAR for AI Level 2 provides a pathway to build on established standards and assurance frameworks while addressing the unique risks AI introduces.
Interactive Mechanism: How It Actually Works
Explore the underlying technology behind this development interactively.
A public chatbot and an internal agent with write access are being assessed. Why need separate threat models?
What to watch next
Organisations that want to show their AI systems are governed under recognised standards can now use STAR for AI Level 2. This new level of certification is designed for companies that already hold, or want to combine, certifications tied to information security and AI management.
Organisations that want to show their AI systems are governed under recognised standards can now use STAR for AI Level 2.
This new level of certification is designed for companies that already hold, or want to combine, certifications tied to information security and AI management.
The programme offers a way to present existing efforts through a single AI assurance designation.
For those using SOC 2 reporting, the attestation route provides a separate path focused on AI controls.
The framework combines recognised standards, a sector-specific controls matrix and a required AI questionnaire submission.