ISO 27017
What is ISO 27017?
An international standard that provides guidelines for information security controls applicable to the provision and use of cloud services. ISO 27017 extends ISO 27002 with cloud-specific guidance.
Terms that appear alongside iso 27017
Each of these is named in at least one of the same controls as iso 27017. The number is how many controls name both.
- information security 10 shared controls
- governance 8 shared controls
- cloud security 8 shared controls
- compliance 8 shared controls
- nist 7 shared controls
- data protection 7 shared controls
- audit 7 shared controls
- iso 27001 6 shared controls
Frameworks that govern iso 27017
What the standards actually require on iso 27017
Requirements naming iso 27017 across 6 standards, quoted from the control text.
ISMAP Assessment positions ISMAP within the comprehensive Japanese and international cloud security regulatory landscape. (1) External Assessment by ISMAP-Approved Auditor: CSP must undergo annual third-party assessment by an audit organisation on the ISMAP Pr...
ISMAP-Assessment-ExternalAuditor-AnnualReview-CustomerTransparency-Coord-FedRAMP-IRAP-GCloud-PIPA-ISO27017 · ISMAP Assessment - External ISMAP-Approved Auditor + Annual Review + Customer Information and Transparency + Coordination FedRAMP/UK G-Cloud/Australia IRAP/Singapore MTCS + ISO 27017 + PIPA + Japan Digital Agency →Section 9.4 of IRS Publication 1075 establishes specific requirements for cloud services and addresses the prohibition on offshore processing of FTI.
IRSPub1075-Section94-Cloud-FedRAMP-Offshore-Prohibition-CSP-USRegion-PrivateGovCloud-AzureGov-AWSGov · IRS Pub 1075 Section 9.4 + Cloud Services + FedRAMP Authorisation Required + Offshore Prohibition + AWS GovCloud + Azure Government + Oracle US Federal + Google Workspace Federal + US-Region Data Residency →Regulated companies formally assess every supplier of computerized systems and services used in GxP regulated work, including cloud service providers, external service providers and internal functions, with the approach based on critical thinking about what is...
gamp-5-good-automated-manufacturing-practice::M2 · Appendix M2 Supplier Assessment →HKMA TM-G-1 coordination + 2024-2025 pipeline. COORDINATION WITH HKMA FRAMEWORKS: (a) HKMA SPM UMBRELLA (separately referenced) - TM-G-1 is one of 60+ SPM modules; SPM provides overall framework + supervisory expectations;
HKMA-TMG1-Coord-SPM-CRAF-Basel-FSB-2024-2025-Pipeline · TM-G-1 Coordination with HKMA SPM, C-RAF v2.0, Basel III, FSB, ISO 27001, NIST CSF and 2024-2025 Pipeline →Training + awareness + coordination operationalise UU PDP within Indonesia and across the regional + global regulatory landscape. Training and Awareness: mandatory cyber + privacy awareness training for all staff + role-specific training for IT + security + ex...
IDPdp-Training-Awareness-Coord-ASEAN-SingaporePDPA-APEC-CBPR-GDPR-Art70to76-MoCom-Transition · Indonesia PDP Training + Awareness + Indonesian Representative + Lembaga PDP Transition + Coordination ASEAN/Singapore PDPA/APEC CBPR/GDPR/India DPDP/Cross-Sectoral OJK/BI/BSSN →Standard 7 per Section 35 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall be processed in a manner that ensures appropriate security including protection against unauthorised or unlawful processing + accidental loss + destruction or...
JM-DPA2020-Standard7-Security-Sec35-Appropriate-Technical-Organisational-Confidentiality-Integrity-Availability-Resilience · Jamaica DPA 2020 Standard 7 - Security + Section 35 + Appropriate Technical and Organisational Measures + Confidentiality + Integrity + Availability + Resilience + Encryption + Pseudonymisation + Risk-Based Security →Questions people ask about iso 27017
What is ISO 27017?
Why is ISO 27017 important for compliance?
Which compliance frameworks address ISO 27017?
Where can I learn more about ISO 27017?
See how ISO 27017 applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.