Ribose achieves world's first CSA STAR Attestation from Ernst & Young
First CSP to achieve STAR Attestation and STAR Certification simultaneously
HONG KONG and SEATTLE and LONDON, Jan. 14, 2015 /PRNewswire/ -- Ribose has become the world's first cloud service provider (CSP) to achieve Cloud Security Alliance's (CSA) STAR Attestation, and is currently the only CSP to have achieved both STAR Certification and STAR Attestation.
STAR Attestation provides a framework for Certified Public Accountants to express an opinion of key factors relating to CSPs' service descriptions, as well as suitability and effectiveness of systems controls. Ribose's achievement was accomplished through completing a Service Organization Controls (SOC) 2 attestation performed by global professional services organization Ernst & Young (EY), using criteria from the 2014 edition of American Institute of Certified Public Accountants' (AICPA) Trust Service Principles and Criteria (TSP 100) together with CSA's Cloud Controls Matrix (CCM) 3.0.1.
According to Jim Reavis, CEO of CSA, "Our mission is to promote trust and transparency in the cloud, and STAR Attestation plays a key role in achieving this goal. As the first CSP to achieve STAR Attestation, Ribose has strengthened its position as a pioneer in cloud security – and also proven the tremendous value of demonstrating cloud security compliance through AICPA attestations with CCM. This is a major milestone for both Ribose and CSA."
"This engagement is the first STAR Attestation globally, representing a significant achievement for Ribose, CSA and EY. In fact, our professionals had to develop new methodology to integrate the new CCM and TSP 100 standards in a streamlined attestation process," explained Vincent Chan, Advisory Services Leader for EY Hong Kong and Macau. "EY was a natural choice for Ribose's attestation as our partners were involved with the development of the STAR attestation scheme."
Ribose founder Ronald Tse remarked, "Achieving STAR Attestation in conjunction with our existing STAR Certification is powerful, independent proof that Ribose provides the highest standards of security and availability – which means our users can rely on our platform to collaborate on valuable intellectual property and confidential data with peace of mind."
Ribose is a cloud collaboration platform that makes working together easy and fun. A forerunner in cloud security, Ribose is the world's first cloud service provider certified to MTCS, STAR Attestation and STAR Certification (CCM 3.0.1). It is also certified to ISO/IEC 27001, ISO/IEC 20000, CDSA CPS and SOC standards, and approved by the UK Government's G-Cloud program for government use.
Ribose is free to use: ribose.com.
The Cloud Security Alliance is a not-for-profit organization led by a broad industry coalition. Dedicated to promote the use of best practices for providing security assurance within cloud computing, CSA also provides education on the uses of cloud computing to help secure all other forms of computing: cloudsecurityalliance.org.
EY is a global leader in assurance, tax, transaction and advisory services. The insights and quality services we deliver help build trust and confidence in the capital markets and in economies the world over. For more information, visit ey.com.
Press contact
[email protected]
Photo - http://photos.prnewswire.com/prnh/20150114/169073
Logo - http://photos.prnewswire.com/prnh/20140310/LA79617LOGO
SOURCE Ribose
Share this article