STAR Attestation, developed by CSA with the AICPA, is a SOC 2 engagement performed by a CPA firm using the AICPA Trust Services criteria together with the CCM, giving an independent third-party assessment of the cloud provider; attestation listings on the registry expire after one year unless updated. It suits providers already holding or adhering to SOC 2.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.