ISO 27017:2015 - Cloud Security

ISO / IEC 27017 is an international standard for securing cloud services. This standard defines specific recommendations for providers of cloud services. The standard belongs to the ISO / IEC 27001 family of standards, the requirements of ISO / IEC 27017 have been specially tailored for providers of cloud services. For each area of the higher-level ISO / IEC 27001 standard, possible special features of cloud security are explicitly set out. This methodology enables you to identify these security requirements more quickly and integrate them into your security management system.

The standard can help cloud providers to identify important security aspects in order to decide on a suitable partner. IT decision-makers want more flexibility and want to be able to select the optimal provider for every application. The provision of IT services is developing from a chain to a network. The commercial and technical relationships multiply and that in turn leads to a whole new level of complexity. The ISO / IEC 27017 standardizes the relationships between customers and cloud service providers through an analysis grid and the targeted exchange of information, thus making it easier to manage the business relationship.

ISO/IEC 27017 - Benefits

• Can be easily included into your ISO 27001 management system
• Clarifies the roles and responsibilities for both service providers and users
• Implements controls on cloud computing to allow continuity and growth of your business
• Reduces risk and provides a competitive advantage over your competition
• Provides a framework to demonstrate GDPR Compliance

Why choose us?