ISO/IEC 27017 Cloud Security Management System (CSMS)

Information technology — Security techniques

ISO/IEC 27017

Not accredited

Provided by: LL-C (Certification) Czech Republic a.s.

What is ISO/IEC 27017?

ISO/IEC 27017 is the international standard for information security in cloud services. It was developed to support cloud providers and cloud users in introducing, applying, and monitoring appropriate security measures – with the aim of preventing data loss, misuse, and unauthorized access.

The standard is based on the core principles of ISO/IEC 27002 and extends them with specific requirements for cloud environments. In this way, ISO/IEC 27017 provides practical guidelines for an effective Cloud Security Management System (CSMS) that ensures the protection of sensitive data across all cloud-related processes.

Who is ISO/IEC 27017 suitable for?

Cloud Service Providers (CSPs) – providers of IaaS, PaaS, and SaaS
Companies that use or manage cloud services
IT service providers, data centers, and managed service providers
Organizations with high data protection and security requirements

ISO/IEC 27017 Requirements

ISO/IEC 27017 includes specific measures and guidelines for securing cloud services:

Implementation of security measures for the provision and use of cloud services
Integration of additional guidance in accordance with ISO/IEC 27002
Protection of confidential data against loss, theft, or manipulation
Access and authorization controls for cloud users
Contractual and legal safeguards between provider and customer
Regular monitoring and risk assessment of the cloud infrastructure

Benefits of ISO/IEC 27017 Certification

Internationally recognized security certification for your cloud services
Increased trust among customers and business partners
Demonstrated compliance with international security standards
Greater competitiveness in the cloud and IT sector
Minimization of cyber risks and financial losses
Protection of sensitive company and customer data
Strengthened IT governance and reputation

The most requested certification

ISO/ IEC 27001

Information Security Management Systems

The internationally recognized standard ISO/IEC 27001 covers the information security management in organizations. Standard ISO/IEC 27001 defines requirements for information security managements systems in the company. The main aim is to ensure protection of data and information to avoid their loss or theft. This helps to reduce the risk of information leakage and it also improves credibility of the company. The certification for ISO/IEC 27001 is recommended to all companies irrespective of their size or sector that process their data by information technology.

More info

ISO 9001

Quality Management Systems

As the competitiveness of business environment grows, clients demand greater quality of goods and services. Standard ISO 9001 has been developed by International Organization for Standardization (ISO) with the aim to implement the international standardized system for quality management. Quality management systems in compliance with ISO 9001 will enable you to improve the quality of your goods and services, to make your company procedures more efficient and it will also allow you to participate in procurement procedures announced by public administration bodies. Standard ISO 9001 is one of the best known and most widely used international standards. This certification is recommended to organizations of any size or sector whose activities include production or provision of services.

More info

ISO 14001

Environmental Management Systems

If you care about the environment, you should seek to adapt your relevant company processes to management systems based on the internationally recognized standard ISO 14001. The certification based on ISO 14001 will enable you not only to fully control the impact your company has on the environment, but it will also help you reduce operational costs in an efficient way. Moreover, your company will get better awareness of environmental issues. The certification for ISO 14001 is recommended particularly to manufacturing companies of any size or sector that wish to take control of their environmental impact. At the same time, you can combine it with the certification for ISO 9001 to get an integrated management system.

More info