Information security, cybersecurity and privacy protection - Information security controls based on ISO/IEC 27002 for cloud services (ISO/IEC DIS 27017:2025)

Comment end date 2025-04-13

Export comments Read draft and comment

Project stage codes

1. Prioritetinių darbo temų pažymėjimas ir ekspertų skyrimas

2. Projektas

3. Viešoji apklausa

From 2025-02-14 till 2025-04-13

4. Closure of enquiry

5. Submission to Formal Vote

Organisation

CEN Europos standartizacijos komitetas

ICS

35.030 - IT Security

Technical Committee

TK 79 IT security techniques

ForeignTC'S

CEN/CLC/JTC 13

Number of comments

Comment start date

2025-02-14

Scope

ISO/IEC 27017:2015 gives guidelines for information security controls applicable to the provision and use of cloud services by providing: - additional implementation guidance for relevant controls specified in ISO/IEC 27002; - additional controls with implementation guidance that specifically relate to cloud services. This Recommendation | International Standard provides controls and implementation guidance for both cloud service providers and cloud service customers.

Relations

Pakeis

prEN ISO/IEC 27017