Offer type: Management system certification

Reference code: ISO_IEC_27017

Cloud ISMS controls guidance — typically addressed together with 27001.

Scope

ISO/IEC 27017 provides guidance on information security controls for cloud services; it is typically addressed together with an ISO/IEC 27001 ISMS.

Benefits

• Clearer cloud customer/provider responsibility boundaries
• Adaptation of 27001 controls to cloud scenarios

Typical process

• Current-state / gap analysis
• Policy, objectives and documentation
• Training and awareness
• Internal audit and management review
• Accredited certification audit (where applicable)

This page describes the certification / assessment service. Licensed standard text is not distributed. Request a quote for scope, duration and pricing.