ISO 27017:2015 – Cloud Data Protection

Overview

This standard is part of the ISO 27000 series of standards for Information Security. ISO 27017: 2015 is based on ISO 27002 for cloud services. The standard provides procedures specifically around cloud computing and is used by organisations that use cloud services and by cloud service providers. As this is a risk assessment-based standard selecting the controls and measures can depend on any legal, contractual, regulatory or other cloud-sector specific information security requirements.

Benefits of ISO 27017:2015

• Can be easily included into your ISO 27001 management system
• Clarifies the roles and responsibilities for both service providers and users
• Implements control on cloud computing to allow continuity and growth of your business
• Provide a competitive advantage & differentiation
• Compliance with business, legal contractual and regulatory requirements
• Reduces risk and provides a competitive advantage over your competition
• Protect Business & Customer Data & Gain Trust from Customer
• Protecting Image and Reputation