Free downloads often feature older, obsolete versions of the standard. Relying on outdated controls will cause you to fail modern compliance audits.
These 37 controls are familiar from ISO 27002 but have been modified for cloud environments. Each modified control includes implementation guidance for both the cloud service provider and the cloud service customer. These range from planning mechanisms (policies, incident management) to technical operations (access control, cryptography, event logging). iso 27017 pdf free download top