ISO/IEC 27017
Security controls for cloud services, for both providers and customers.
International · ISO/IECWho it applies to
Cloud service providers and their customers.
Key areas
- Shared responsibility
- Virtual machine and tenant separation
- Cloud asset and data removal
How Nigehban helps
- Gap assessment against the requirements
- Remediation roadmap and implementation support
- Independent audit and evidence review
- Monitoring that proves controls keep working
Related standards
ISO/IEC 27001:2022
The certifiable standard for an information security management system (ISMS).
InternationalISO/IEC 27002:2022
Practical guidance for implementing the controls listed in ISO/IEC 27001 Annex A.
InternationalISO/IEC 27005:2022
Guidance on managing information security risk within an ISMS.
International