ISO/IEC 27017:2026
What is ISO/IEC 27017:2026?
ISO/IEC 27017:2026 is the second edition of the cloud services code of practice, published in July 2026 to replace ISO/IEC 27017:2015. It gives cloud service specific guidance on the ISO/IEC 27002:2022 controls for cloud service customers and providers, plus four cloud specific controls. It is guidance, not requirements. It comprises 43 controls organised across 4 domains, and applies in International.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →Where ISO/IEC 27017:2026 overlaps with the standards you already hold
What ISO/IEC 27017:2026 means in your sector
What ISO/IEC 27017:2026 means for your job
Questions people ask about ISO/IEC 27017:2026
What is ISO/IEC 27017:2026?
How many controls does ISO/IEC 27017:2026 have?
Where does ISO/IEC 27017:2026 apply?
Which version of ISO/IEC 27017:2026 is covered here?
Query ISO/IEC 27017:2026 programmatically
ISO/IEC 27017:2026, its 43 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
ISO/IEC 27017:2026 API reference and MCP config →How ready are you for ISO/IEC 27017:2026?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.