ISO 27017 is built upon the existing security controls of ISO 27002 and covers the part of cloud computing. It generally focuses on the protection of the information in the cloud services.
ISO 27017 gives guidelines for information security controls applicable to the provision and use of cloud services by providing:
- additional implementation guidance for relevant controls specified in ISO/IEC 27002;
- additional controls with implementation guidance that specifically relate to cloud services.
This International Standard provides controls and implementation guidance for both cloud service providers and cloud service customers.
This certificate, together with ISO27001, is a proof of our commitment to provide secure and reliable IT services for our customers. Certification and auditioning was performed by Bureau Veritas.
