ISO 27017 Insights

What is ISO 27017?

ISO 27017 is an international standard that provides guidelines for information security controls applicable to the provision and use of cloud services. It is based on ISO/IEC 27002 and specifies additional implementation guidance for cloud-specific controls, supplementing existing information security management systems (ISMS) to reduce cloud-specific risks. It helps cloud service providers and cloud service customers understand their respective roles and responsibilities in maintaining a secure cloud environment. Organizations use ISO 27017 to demonstrate they have the necessary controls in place to protect sensitive data stored in the cloud, address cloud-specific security threats, and meet regulatory requirements.

Find organizations using ISO 27017 on Sumble →

What other technologies are related to ISO 27017?

ISO 27017 Complementary Technologies

ISO 27018

ISO 27018 is a code of practice for protecting Personally Identifiable Information (PII) in public clouds. It complements ISO 27017, which deals with general cloud security.

mentioned alongside ISO 27017 in 31% (211) of relevant job posts

ISO 27701

ISO 27701 specifies requirements and provides guidance for establishing, implementing, maintaining and continually improving a Privacy Information Management System (PIMS). It extends ISO 27001 and ISO 27002 for privacy management, thus complementing ISO 27017 as well.

mentioned alongside ISO 27017 in 9% (116) of relevant job posts

ISO 27001

ISO 27001 specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS). ISO 27017 is built upon ISO 27001, providing cloud-specific guidance that enhances the ISMS.

mentioned alongside ISO 27017 in 1% (370) of relevant job posts