·
additional
implementation guidance for relevant controls specified in ISO/IEC 27002;
·
additional
controls with implementation guidance that specifically relate to cloud
services.
Used with ISO 27001 series of standards, ISO
27017 provides enhanced controls for cloud service providers and cloud service
customers. Unlike many other technology-related standards ISO 27017 clarifies
both party's roles and responsibilities to help make cloud services as safe and
secure as the rest of the data included in a certified information management
system.
·
Develop a long-term strategy
·
Increase transparency
·
Reduce reputation risks
·
Win customer trust
·
Protects against fines - ensures that local
regulations are complied with reducing the risk of fines for data breaches.
·
Protects your brand reputation - reduces the risk
of adverse publicity due to data breaches.
ISO 27017 certification can be applied to organisations
of any size and type involved in providing cloud server services.
