ISO/IEC 27017:2015 – Security techniques – Code of practice for information security controls based on ISO/IEC 27002 for cloud services
ISO 27017 is a sector-specific supplement to ISO 27001:2013 and ISO 27002:2013, containing additional security controls and guidance specific to Cloud services not found in ISO 27002.
Based on a collaborative approach to Cloud security whereby service providers and their customers each accepts specific responsibilities, ISO 27017 is useful for Cloud service providers and their customers alike.
Customers can use ISO 27017 to identify their responsibilities when using Cloud services, and as a checklist to ensure that potential Cloud service providers have the necessary security policies and controls in place to secure their critical information.
Ensure the security of the Cloud services you provide or use with ISO 27017. Buy now.