Skip to main content
Tagasi

ISO/IEC 27018:2014

Information technology -- Security techniques -- Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors

Üldinfo

Kehtetu alates 15.01.2019
Tegevusala (ICS grupid)
35.030 Infoturve
Direktiivid või määrused
puuduvad

Standardi ajalugu

Staatus
Kuupäev
Tüüp
Nimetus
15.01.2019
Põhitekst
29.07.2014
Põhitekst
ISO/IEC 27018:2014 establishes commonly accepted control objectives, controls and guidelines for implementing measures to protect Personally Identifiable Information (PII) in accordance with the privacy principles in ISO/IEC 29100 for the public cloud computing environment.
In particular, ISO/IEC 27018:2014 specifies guidelines based on ISO/IEC 27002, taking into consideration the regulatory requirements for the protection of PII which might be applicable within the context of the information security risk environment(s) of a provider of public cloud services.
ISO/IEC 27018:2014 is applicable to all types and sizes of organizations, including public and private companies, government entities, and not-for-profit organizations, which provide information processing services as PII processors via cloud computing under contract to other organizations.
The guidelines in ISO/IEC 27018:2014 might also be relevant to organizations acting as PII controllers; however, PII controllers can be subject to additional PII protection legislation, regulations and obligations, not applying to PII processors. ISO/IEC 27018:2014 is not intended to cover such additional obligations.

Nõutud väljad on tähistatud *

*
*
*
PDF
82,61 € koos KM-ga
Paber
82,61 € koos KM-ga
Standardi monitooring

Teised on ostnud veel

Põhitekst

ISO/IEC 27017:2015

Information technology -- Security techniques -- Code of practice for information security controls based on ISO/IEC 27002 for cloud services
Uusim versioon Kehtiv alates 30.11.2015
Põhitekst

ISO/IEC TR 27008:2011

Information technology -- Security techniques -- Guidelines for auditors on information security controls
Kehtetu alates 14.01.2019
Põhitekst

ISO/IEC 27002:2013

Information technology -- Security techniques -- Code of practice for information security controls
Kehtetu alates 15.02.2022
Põhitekst

ISO/IEC 27001:2013

Information technology -- Security techniques -- Information security management systems -- Requirements
Kehtetu alates 25.10.2022