This document establishes commonly accepted control objectives, controls and guidelines for implementing measures to protect Personally Identifiable Information (PII) in line with the privacy principles in ISO/IEC 29100 for the public cloud computing environment.

ISO/IEC 27018 Information technology — Security techniques — Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors is a privacy standard, part of the ISO/IEC 27000 family of standards.

2023年12月7日 · In 2014, the ISO adopted ISO/IEC 27018:2014, an addendum to ISO/IEC 27001, the first international code of practice for cloud privacy. Based on EU data-protection laws, it gives specific guidance to cloud service providers (CSPs) acting as processors of personally identifiable information (PII) on assessing risks and implementing state-of-the ...

2024年9月26日 · ISO 27017 and ISO 27018 (from the ISO 27000 family) focus on addressing specific areas of Cloud security through guidance and control sets.

Cloud service providers who process Personally Identifiable Information (PII) under contract to their customers need to operate their services in ways that allow both parties to meet the requirements of applicable legislation and regulations covering the protection of PII.

ISO 27018 gives generic agreed guidance on information security categories. The standard targets public cloud services providers that act as PII processors. Its key objectives are to: Why is securing Personally Identifiable Information important? According to IBM Security’s 2020 Data Breach Report, 80% of all data breaches involve PII.

ISO/IEC 27018 is a code of practice for protecting personally identifiable information in public cloud services. It’s structured as an extension to the widely used and respected ISO/IEC 27002 code of practice for information security controls. So what specifically does ISO/IEC 27018 offer customers of cloud services and why is it important?

ISO/IEC 27018 (Information technology, security techniques, code of practice for protection of PII in public clouds) gives a framework for assessing how well an organization protects PII in public clouds. ISO/IEC 27018 guidelines help to protect your organization's highly sensitive or critical PII.

What is ISO/IEC 27018? ISO/IEC 27018 (Information technology – Security techniques – Code of practice for protection of PII in public clouds acting as PII processors) serves as a guideline or code of practice for selecting PII protection controls within the process of implementing an ISO/IEC 27001-based ISMS in a cloud environment.

ISO 27018 is a standard from the International Standards Organization that establishes security controls for protecting personal information in cloud computing.