ISO/IEC 27017:2015 – Security Controls for Cloud Services

ISO/IEC 27017:2015 is an international standard that provides guidelines for information security in cloud services. Introduces controls specific to the cloud context, aimed at both cloud providers and customers. It includes measures to manage and mitigate security risks, such as separation of virtual environments, secure management of shared resources, and protection against unauthorized access. The goal is to improve security and trust in the use of cloud services, both public and private.