Entropy scoring & verification
CSA STAR
The Cloud Security Alliance’s Security, Trust, Assurance and Risk registry — a public listing where a cloud provider either self-assesses (Level 1) or undergoes an independent third-party audit (Level 2) against the Cloud Controls Matrix. A continuous-auditing Level 3 has been discussed by CSA but is still in development and not yet available. Entropy tracks a vendor’s CSA STAR listing, including its level, as part of the Governance score.