Product Details

• Mode of ReportSoft Copy
• Type of IndustryFor IT and Consulting
• Type of CertificationNew Certification
• Document verification ModeOnline
• Target LocationPan India
• Certifications ProvidedISO 27018

  What is ISO 27018:2019 Certification

  ISO/IEC 27018:2019 establishes commonly accepted control objectives, controls and guidelines for implementing measures to protect Personally Identifiable Information (PII) in accordance with the privacy principles in ISO/IEC 29100 for the public cloud computing environment.
  In particular, ISO/IEC 27018:2019 specifies guidelines based on ISO/IEC 27002, taking into consideration the regulatory requirements for the protection of PII which might be applicable within the context of the information security risk environment(s) of a provider of public cloud services.
  ISO/IEC 27018:2019 is applicable to all types and sizes of organizations, including public and private companies, government entities, and not-for-profit organizations, which provide information processing services as PII processors via cloud computing under contract to other organizations.
  The guidelines in ISO/IEC 27018:2019 might also be relevant to organizations acting as PII controllers; however, PII controllers can be subject to additional PII protection legislation, regulations and obligations, not applying to PII processors. ISO/IEC 27018:2019 is not intended to cover such additional obligations.

  ISO 27018:2019 Structure

  iso 27018:2019 consist of 18 Clauses and Annexure A
  Clause-
  1. Scope
  2. Normative References
  3. Terms and condition
  4. Overview
  5. Information Security Policy
  6. Organization of Information Security
  7. Human Resource Security
  8. Asset Management
  9. Access Control
  10. Cryptography
  11. Physical and Environmental security
  12. Operational Security
  13. Communication Security
  14. System Acquisition Development and maintenance
  15. Supplier Relationships
  16. Information Security Incident Manager
  17. Information Security aspects of business continuity management
  18. Compliance
  Annexure A-Public Cloud PII Processor extended control set for PII protection