NF EN ISO/IEC 27017

NF EN ISO/IEC 27017

January 2021
Standard Current

Information technology - Security techniques - Code of practice for information security controls based on ISO/IEC 27002 for cloud services

ISO/IEC 27017:2015 gives guidelines for information security controls applicable to the provision and use of cloud services by providing: - additional implementation guidance for relevant controls specified in ISO/IEC 27002; - additional controls with implementation guidance that specifically relate to cloud services. This Recommendation | International Standard provides controls and implementation guidance for both cloud service providers and cloud service customers.

See more
View the extract
Main informations

Collections

National standards and national normative documents

Publication date

January 2021

Number of pages

46 p.

Reference

NF EN ISO/IEC 27017

ICS Codes

03.100.70   Management systems
35.030   IT Security

Classification index

Z74-218

Print number

1

International kinship

ISO/IEC 27017:2015

European kinship

EN ISO/IEC 27017:2021
Sumary
Information technology - Security techniques - Code of practice for information security controls based on ISO/IEC 27002 for cloud services

ISO/IEC 27017:2015 gives guidelines for information security controls applicable to the provision and use of cloud services by providing:

- additional implementation guidance for relevant controls specified in ISO/IEC 27002;

- additional controls with implementation guidance that specifically relate to cloud services.

This Recommendation | International Standard provides controls and implementation guidance for both cloud service providers and cloud service customers.

Table of contents
  • 1 Domaine d'application
  • 2 Références normatives
  • 3 Termes, définitions et abréviations
  • 4 Concepts spécifiques au secteur du nuage
  • 5 Politiques de sécurité de l'information
  • 6 Organization de la sécurité de l'information
  • 7 Sécurité des ressources humaines
  • 8 Gestion des actifs
  • 9 Contrôle d'accès
  • 10 Cryptographie
  • 11 Sécurité physique et environnementale
  • 12 Sécurité liée à l'exploitation
  • 13 Sécurité des communications
  • 14 Acquisition, développement et maintenance des systèmes d'information
  • 15 Relations avec les fournisseurs
  • 16 Gestion des incidents liés à la sécurité de l'information
  • 17 Aspects de la sécurité de l'information dans la gestion de la continuité de l'activité
  • 18 Conformité
  • Annexe A Ensemble étendu de mesures pour les services en nuage
  • Annexe B Références sur les risques de sécurité de l'information liés à l'informatique en nuage
  • Bibliographie
ZOOM ON ... the Requirements department
To comply with a standard, you need to quickly understand its issues in order to determine its impact on your activity.

The Requirements department helps you quickly locate within the normative text:
- mandatory clauses to satisfy,
- non-essential but useful clauses to know, such as permissions and recommendations.

The identification of these types of clauses is based on the document “ISO / IEC Directives, Part 2 - Principles and rules of structure and drafting of ISO documents ”as well as on a constantly enriched list of verbal forms.

With Requirements, quickly access the main part of the normative text!

With Requirements, quickly access the main part of the normative text!
Need to identify, monitor and decipher standards?

COBAZ is the simple and effective solution to meet the normative needs related to your activity, in France and abroad.

Available by subscription, CObaz is THE modular solution to compose according to your needs today and tomorrow. Quickly discover CObaz!

Request your free, no-obligation live demo

I discover COBAZ