Skip to main content

ISO 27017

Definition

ISO 27017 is an international standard providing guidelines for information security specific to cloud services, extending ISO 27001 with cloud-specific security controls.

ISO 27017 addresses both cloud providers and cloud customers. The standard describes additional security controls for cloud-specific risks such as shared environments, virtualization, and multi-tenancy.

Related terms

ISO 27001 Cloud Security CSPM (Cloud Security Posture Management)