Which of the following is a cloud-specific security standard?

The correct answer is A. ISO27017. ISO/IEC 27017 is a code of practice specifically for information security controls applicable to cloud services, extending ISO/IEC 27002 with cloud-specific guidance for both CSPs and cloud service customers. ISO 27701 addresses privacy information management (aligned with…

Cloud Compliance

Question

Options

AISO27017
BISO27701
CISO22301
DISO14001

How the community answered

(32 responses)

A
94% (30)
B
3% (1)
C
3% (1)

Explanation

ISO/IEC 27017 is a code of practice specifically for information security controls applicable to cloud services, extending ISO/IEC 27002 with cloud-specific guidance for both CSPs and cloud service customers. ISO 27701 addresses privacy information management (aligned with GDPR). ISO 22301 covers business continuity management. ISO 14001 is an environmental management standard with no security relevance. Only ISO 27017 was purpose-built to address cloud computing security scenarios.

Topics

#Cloud Security Standards#ISO 27017#Information Security Controls#Cloud Compliance Frameworks

Community Discussion

No community discussion yet for this question.

Full CCAK Practice