Improve cloud service usage specifications and enhance data protection in cloud environments
Organizations around the world are increasingly aware of the business value that cloud computing brings and are taking steps to transition to the cloud due to the flexibility, continuity, and scalability that cloud services offer. One of the main challenges of cloud computing is how to address the security and privacy concerns of enterprises planning to adopt it and the cloud service providers (GSPs) that implement it.
ISO/IEC 27017 is an international standard for securing cloud services that defines specific requirements for GSPs. ISO/IEC 27017 builds on the controls defined in ISO/IEC 27001, adding additional controls and implementation guidance specifically designed to help businesses securely set up and use cloud services to protect information stored and/or processed in the cloud. The ISO/IEC 27017 standard works in conjunction with the ISO/IEC 27001 family series of standards to provide enhanced controls for cloud service providers and cloud service customers. Unlike many other technology-related standards, the ISO/IEC 27017 standard sets out the roles and responsibilities of both parties in helping to ensure that cloud services are as secure and reliable as other data contained in certified information management systems.
As the global use of cloud technology continues to grow, enterprises must strategically consider the risks of storing protected information and explore security options to protect their information systems. There are multiple security standards available to cloud service providers and users to protext cloud-based environments and to minimize the potential risk of security incidents, ISO/IEC 27017 provides value to businesses moving data to and/or sharing data in the cloud (including GSPs).
The ISO/IEC 27017 standard allows organizations to work on long-term goals. By having an internationally standardized framework to build their cloud security, after internalization of requirements, organizations will be able to reduce operational and reputational risks and work toward a sustainable future. The standard broadly covers the following subjects: asset ownership, recovery measures in the event of GSP dissolution, disposal of assets with sensitive information, segregation and storage of data, security management adjustments for virtual and physical networks, etc. The standard can help cloud providers identify important security aspects while identifying suitable partners.
The ISO/IEC 27017 standard is a unique technical standard that addresses the business needs of customers and cloud service providers. ISO/IEC 27017 is designed to help recommend and implement controls for cloud-based organizations, not only relevant to organizations whose information is stored in the cloud, but also to providers of cloud-based services to other companies that may have sensitive information, Meeting this standard will help businesses build trust with customers and other stakeholders, demonstrating a competitive advantage.
○ ISO/IEC 27001-2013 Information Technology - Security Technology - Information Security Management System - Requirements
○ ISO/IEC 27002-2022 Information Security, Cybersecurity and Privacy Protection Information Security Control
○ GB/T 37724-2019 Information technology-Industrial cloud service-Capabilities general requirements
○ GB/T 37738-2019 Information technology-Cloud computing-Cloud service quality evaluation indicator
○ Provide customers and stakeholders with greater confidence in the security of their data and information;
○ Provide a competitive advantage and demonstrate robust controls over data protection;
○ Protect brand reputation and reduce the risk of negative publicity caused by data leakage;
○ Ensure compliance with local regulations and reduce the risk of fines for data breaches;
○ Provides general guidelines covering different countries to facilitate doing business globally and gaining opportunities as a preferred supplier.
Tel：+86-400 821 5138
Fax：+86-21 3327 5843
Email：noa@noagroup.com
