ISO/IEC 27017:2026 Information Security Controls for Cloud Services

Training Course

ISO/IEC 27017:2026 Information Security Controls for Cloud Services

Level Specialist Duration 2 days

Available to book: In-house Request a quote

As technology advances and organizations increase their use of cloud services, the requirement to have more specific cloud security controls in place is critical.

While using a cloud service can often increase information security risks, many of the ISO/IEC 27001 controls highlight responsibilities for either a cloud service customer, or the cloud service provider. ISO/IEC 27017 is a code of practice, which provides guidance on these controls and helps you focus on the more specific risks associated with cloud services as a customer or provider.

Alongside your ISO/IEC 27001 ISMS, ISO/IEC 27017 helps manage the confidentiality, integrity and availability of your business information or information entrusted to you by others.

This course helps you clearly identify who is responsible to manage the different security risks and ensure the appropriate cloud security controls are in place so you can maintain a resilient ISMS.

How will you benefit?

This course will help you:

Identify key benefits associated with using ISO/IEC 27017 for cloud services, alongside an effective ISMS
Consider the risks associated with using cloud services
Ensure that your management system considers appropriate cloud-related controls that enable improved organizational security as technology evolves
Provide products and services that consistently meet customer needs and enhance confidence

You will learn about:
- Explain the purpose and structure of ISO/IEC 27017
- Understand cloud-specific security risks and responsibilities
- Apply ISO/IEC 27017 controls to cloud service customers and providers
- Evaluate cloud supplier agreements and security commitments
- Implement effective organizational, people, physical and technological cloud controls
- Identify and implement cloud specific controls
- Assess shared responsibility models across cloud service types
Anyone who plans, implements, maintains, supervises or assesses information security controls, as part of an information security management system, as either a customer or provider of cloud services.
On completion, you’ll be awarded an internationally recognized BSI Training Academy certificate.

Let's shape your organization's future together

Reach out and see how we can help guide you on your path to sustainable operational success.

Get in touch