ISO 27017:2015

• Strengthens information security in cloud-based environments by managing the associated risks.
• Provides practical compliance guidance for both cloud service providers and customers.
• The system supports and strengthens risk assessments and mitigation related to cloud-based data breaches.
• The system aligns with international cybersecurity best practices and policies.
• The system supports regulatory adherence with cloud-based global security standards.

Technical Controls: Data encryption, virtual machine hardening, network alignment, and cloud-based monitoring.

Organizational Controls: Robust risk management, incident response plans, and shared roles and responsibilities to ensure a secure cloud environment.

Legal Controls: Contractual obligations, regulatory compliance and data return removal. 

Physical Controls: Secured data centers and environmental controls to prevent cloud infrastructure from physical threats. 

Human Resource Controls: Periodic training and awareness, secured access management, and thorough background checks.