Mr. Chen Li, Vice President and Director of Business Development in DNV GL Business Assurance Greater China, handed over the certificate to the Director of the Tencent Information Security Executive Committee, Mr. Yang Peng at the Tencent Qcloud Summit in Xi’an, China on October 18th. Mr. Chen shared the assessment comments given by the leader of the audit team which underlined the strong internal focus and management commitment to cloud security in Tencent Cloud.
Mr. Peng said that passing through the CSA-STAR cloud security management system certification and obtaining the ISO 27001 standard, recognized by both international and domestic authorities, demonstrated that Tencent Cloud’s security control systems was on par with other global cloud service providers.
The CSA STAR certification is a third party independent assessment of the security of a cloud service provider. The technology-neutral certification leverages on the requirements of the ISO/IEC 27001 management system standard together with the CSA Cloud Controls Matrix, a specified set of criteria that measures the capability levels of the cloud service. The STAR Certification is based upon achieving ISO/IEC 27001 and the specified set of criteria outlined in the Cloud Controls Matrix.
The delivered ISO/IEC 27001-certificate is issued under both UKAS and CNAS accreditation.
The CSA-STAR certification covers Tencent Cloud’s global business scope and 23 product lines, including its data centers at home and abroad, Internet as a Service (IaaS), Platform as a Service (PaaS) and Software as a Service (SaaS) cloud services.