ISO 27017 Information security for cloud services
Receive a quote tailored to your needs
We live in a world of big data and online information. Consumers and businesses want to be able to trust that the data shared with organisations via the cloud is safe. To ensure that privacy-sensitive information does not get misused or fall into the wrong hands, information security risk management is essential for any organisation that stores and processes data in a cloud environment or provides services that enable this.
Supplement to ISO 27001
The NEN-EN-ISO/IEC 27017 provides guidelines for information security controls that apply to the provision and use of cloud services. In addition to ISO 27001 for information security, ISO 27017 includes:
- Additional implementation guidelines for relevant controls specified in ISO/IEC 27002;
- Additional controls with implementation guidelines specifically related to cloud services.
For suppliers and users
The ISO 27017:2021 standard has been developed for both providers and users of cloud services who have already set up their information management in accordance with the ISO 27001 standard. In addition to ISO 27001, ISO 27017 provides specific risks and measures for providers and customers of cloud services. For example, the standard helps providers of cloud services to create trust in their services and supports customers of cloud services to achieve optimal security of cloud data together with their suppliers. The standard also describes what customer and supplier can expect from each other.
Why ISO 271017 certification?
- More security for you and your customers/stakeholders;
- More clarity regarding safety and responsibility;
- Competitive advantage;
- Grip on data;
- Testing of ISO 27001 as the basis for ISO 27017.
Certification by Kiwa
Information is becoming increasingly valuable for many companies and organisations. Customer and production data is not only crucial for day-to-day operations, but can also have financial implications if not handled responsibly. Your information must therefore be secured. Kiwa has experts in the field of information security. They have extensive experience with certification processes in the field of ICT and information security in the most diverse sectors.
Prepare with a pre-audit/GAP analysis
Are you planning to certify your organization according to a specific standard but unsure where to start? Or have you already implemented a management system in line with, for example, ISO 9001, ISO 27001, or ISO 14001, but you're uncertain if it fully meets the certification requirements? Discover more about our pre-audit/GAP analysis.
ISO 27001 certification - A solid base for information security
ISO 27001 helps you to deal with information security in a structured way. Kiwa’s experts can certify your organisation against this internationally recognised standard and thus lay the foundation for a process-based approach to data security.
NEN 7510 certification: take care of your confidential information
Kiwa was the first in the Netherlands to have a NEN 7510 accreditation and has a great deal of experience with regard to the NEN 7510 certification. Look here for more info!
In control of sensitive information with Kiwa's GDPR certificate
Do you want to demonstrate that your business operations comply with the General Data Protection Regulation (GDPR)? With a GDPR audit by Kiwa and the resulting GDPR certificate, you can show that you are in control when it comes to protecting sensitive privacy information.
ISO 9001 Quality Management
ISO 9001 is the international standard for quality management systems. Kiwa has extensive experience with ISO 9001 certification. With auditors active in a wide range of industries, we have all the sector knowledge needed to make your certification process a success.
Prepare with a pre-audit/GAP analysis
Are you planning to certify your organization according to a specific standard but unsure where to start? Or have you already implemented a management system in line with, for example, ISO 9001, ISO 27001, or ISO 14001, but you're uncertain if it fully meets the certification requirements? Discover more about our pre-audit/GAP analysis.