What happened
On 27 Oct 2026 CSA announced availability of the Security, Trust, Assurance, and Risk (STAR) for AI Level 2, building on STAR for AI to bring third-party-verified AI assurance alongside traditional cloud certification. Level 2 combines independent certification with automated analysis via Valid-AI-ted for AI, aligned with CSA's AI Controls Matrix (AICM) and related standards. Three certification paths are offered (ISO/IEC 27001:2022 + AICM; ISO/IEC 27001:2022 + ISO/IEC 42001:2023 + AICM; ISO/IEC 42001:2023 + AICM), plus a SOC 2-based Attestation path for AI-specific control design/operating effectiveness; a Valid-AI-ted AICAIQ submission is required in all cases.
Why it matters
STAR for AI Level 2 is a published, adoptable assurance framework that lets organizations extend existing industry certifications and assurance frameworks into the AI domain. It gives cloud/AI service providers and AI deployers a certificated route to demonstrate AI governance maturity, operational transparency and control effectiveness against ISO/IEC 42001/27001 plus the AICM, which is directly useful for customers, partners and auditors requiring evidence-based responsible-AI assurance.
Action needed
Map your current ISO/IEC 42001 / ISO/IEC 27001 and AICM control posture against STAR for AI Level 2, and evaluate the certification vs. SOC 2-based attestation path if you need third-party-verified AI assurance evidence.