CSA STAR (Security, Trust, Assurance, and Risk) L2-MATURITY: Have the CCM assessed against the management capability model and keep maturity scores private

Every STAR Certification assessment audits the CCM against a management capability (maturity) model using the CCM and the maturity model grid defined in CSA's guidance document Auditing the Cloud Controls Matrix. After the assessment the provider may choose to make the certification public on the registry, but maturity scores must not appear on the certificate or the registry and reports are for internal use; if a report is shared or published it must be shared in its entirety.