ISO 27017:2015 is the latest standards framework in place for ISO 27017. It is connected to the wider ISO 27000 series of international ISO standards that focus on international security managements systems which organisations need to strengthen their cloud data protection services.
ISO 27001 is the international standard used by organisations worldwide to manage information security. It was first created by the International Organisation for Standardization.
Yes, to gain ISO 27017 certification, your organisation will have to prove it has appropriate ISO 27001 systems in place to begin the ISO 27017 certification process.
ISO 27017 is suitable for all types and sizes of organisations – from SMEs and smaller businesses to large corporations and government departments – that need to securely handle and process data using cloud-based systems, or that provide cloud-based services to clients. The internationally recognised standard is used by many industry sectors such as retail, hospitality, manufacturing, construction and financial services.
ISO standard certification usually lasts for three years. During this time, auditors will conduct routine checks on a six-monthly basis to ensure the requirements for ISO 27017 certification are still being met.
