ISO 27017
Definition
ISO 27017 is an international standard providing guidelines for information security specific to cloud services, extending ISO 27001 with cloud-specific security controls.
ISO 27017 addresses both cloud providers and cloud customers. The standard describes additional security controls for cloud-specific risks such as shared environments, virtualization, and multi-tenancy.