Templates
Field references for the three official documents. Ready files arrive with v1.0.
Field references for the ROC, SAQ and AOC. Ready Word/PDF/Markdown files arrive with v1.0.
This is the v0.2 draft; the final version ships with the v1.0 release. Ready ROC/SAQ/AOC template files arrive then too, but the standard itself is downloadable now.
Download the standard (PDF)
The version, size and SHA-256 of the file are shown — verify the checksum before relying on a copy you receive.
CCSA Standard — full normative text
One authoritative file with all of B.1–B.8, A/C/D and Annexes 1–5. Suited to circulating in procurement and audit workflows.
v0.2
750 KB
SHA-256
9447926060b2…ROC (Report on Compliance)
The detailed confidential compliance report: 15 main sections, a Requirement Assessment Worksheet per requirement and a Carry-Over Validation Worksheet (Annex 3).
ROC worksheetOn this page
ROC (Report on Compliance)
The Council distributes ready Word/PDF/Markdown versions; they arrive with the v1.0 release.
v0.2 draft -> v1.0
Coming with v1.0
ROC (Report on Compliance)
The Council distributes ready Word/PDF/Markdown versions; they arrive with the v1.0 release.
v0.2 draft -> v1.0
Coming with v1.0
ROC (Report on Compliance)
The Council distributes ready Word/PDF/Markdown versions; they arrive with the v1.0 release.
v0.2 draft -> v1.0
Coming with v1.0
SAQ (Self-Assessment Questionnaire)
The self-assessment questionnaire: Common Sections A/B/C and per-segment question libraries. SAQ-C1 is fully written; C2/C3/C4 are published by the Council at v1.0 (Annex 4).
SAQ-C1On this page
SAQ (Self-Assessment Questionnaire)
The Council distributes ready Word/PDF/Markdown versions; they arrive with the v1.0 release.
v0.2 draft -> v1.0
Coming with v1.0
SAQ (Self-Assessment Questionnaire)
The Council distributes ready Word/PDF/Markdown versions; they arrive with the v1.0 release.
v0.2 draft -> v1.0
Coming with v1.0
SAQ (Self-Assessment Questionnaire)
The Council distributes ready Word/PDF/Markdown versions; they arrive with the v1.0 release.
v0.2 draft -> v1.0
Coming with v1.0
AOC (Attestation of Compliance)
The final public declaration: a 14-part structure including the public LVCS summary (entity, segment, level, validity, CCSAC and Lead Auditor, scope, CC summary, baseline carry-over) (Annex 5).
On this page
AOC (Attestation of Compliance)
The Council distributes ready Word/PDF/Markdown versions; they arrive with the v1.0 release.
v0.2 draft -> v1.0
Coming with v1.0
AOC (Attestation of Compliance)
The Council distributes ready Word/PDF/Markdown versions; they arrive with the v1.0 release.
v0.2 draft -> v1.0
Coming with v1.0
AOC (Attestation of Compliance)
The Council distributes ready Word/PDF/Markdown versions; they arrive with the v1.0 release.
v0.2 draft -> v1.0
Coming with v1.0
Checklists
The self-assessment questionnaire: Common Sections A/B/C and per-segment question libraries. SAQ-C1 is fully written; C2/C3/C4 are published by the Council at v1.0 (Annex 4).
Annex 3
ROC worksheet
The detailed confidential compliance report: 15 main sections, a Requirement Assessment Worksheet per requirement and a Carry-Over Validation Worksheet (Annex 3).
OpenAnnex 4
SAQ-C1
The self-assessment questionnaire: Common Sections A/B/C and per-segment question libraries. SAQ-C1 is fully written; C2/C3/C4 are published by the Council at v1.0 (Annex 4).
Run self-assessmentDraft v0.2 -> v1.0. Subject to change before 2027-01-01.
SAQ (Self-Assessment Questionnaire)
The Council distributes ready Word/PDF/Markdown versions; they arrive with the v1.0 release.