ISO/IEC 27017:2015
Situated within the ISO/IEC 27000 family of standards, renowned for furnishing best-practice directives in information security management, ISO 27017 draws its origins from ISO/IEC 27002. It augments this foundation by introducing specific cloud security controls that were not fully addressed in its predecessor.
The standard offers comprehensive guidance for the further implementation of these additional controls, along with pertinent controls delineated in ISO/IEC 27002. Notably, it encompasses regulations pertaining to the utilization of cloud services, thus ensuring a robust security posture.