Iso iec 17789 2014 specifies the cloud computing reference architecture ccra.
Iso cloud security.
Components of security and of protection of pii 60 60.
Iso iec 17789 2014 information technology cloud computing reference architecture.
Like other iso management system standards certification to iso iec 27001 is possible but not obligatory.
They define security standards for today s fastest growing industry cloud computing this topic is so big and so hot that these two standards might achieve the same level of success as their older brothers iso 27001 and iso 27002.
Google cloud platform our common infrastructure g suite chrome and apigee are certified as iso iec 27001 compliant.
Some organizations choose to implement the standard in order to benefit from the best practice it contains while others decide they also want to get certified to reassure customers and clients that its recommendations have been followed.
Iso iec 27001 outlines and provides the requirements for an information security management system isms specifies a set of best practices and details the security controls that can help manage information risks.
The iso iec 27017 2015 gives guidelines for information security controls.
Certification to iso iec 27001.
Iso iec 19941 2017 information.
The iso iec 27017 2015 code of practice is designed for organizations to use as a reference for selecting cloud services information security controls when implementing a cloud computing information security management system based on iso iec 27002 2013.
Overview and concepts.
Iso iec 27017 2015 gives guidelines for information security controls applicable to the provision and use of cloud services by providing.
Additional implementation guidance for relevant controls specified in iso iec 27002.
Information technology cloud computing service level agreement sla framework part 1.
This standard provides guidance on the information security aspects of cloud computing recommending and assisting with the implementation of cloud.
Framework part 4.
Google cloud platform and g suite are certified as iso iec 27017 compliant.
Iso iec 27017 2015 provides guidance on the information security aspects of cloud computing recommending the implementation of cloud specific information security controls that supplement the guidance of the iso iec 27002 and iso iec 27001 standards.
It can also be used by cloud service.
Previous standard up a level next standard iso iec 27017 2015 itu t x 1631 information technology security techniques code of practice for information security controls based on iso iec 27002 for cloud services introduction.
The future of iso 27017 together with iso 27018 seems quite bright.