Tagasi

ISO/IEC 27018:2019

Information technology -- Security techniques -- Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors

Üldinfo
Kehtiv alates 15.01.2019
Tegevusala (ICS grupid)
35.030 Infoturve
Direktiivid või määrused
puuduvad

Standardi ajalugu

Staatus
Kuupäev
Tüüp
Nimetus
15.01.2019
Põhitekst
29.07.2014
Põhitekst
This document establishes commonly accepted control objectives, controls and guidelines for implementing measures to protect Personally Identifiable Information (PII) in line with the privacy principles in ISO/IEC 29100 for the public cloud computing environment.
In particular, this document specifies guidelines based on ISO/IEC 27002, taking into consideration the regulatory requirements for the protection of PII which can be applicable within the context of the information security risk environment(s) of a provider of public cloud services.
This document is applicable to all types and sizes of organizations, including public and private companies, government entities and not-for-profit organizations, which provide information processing services as PII processors via cloud computing under contract to other organizations.
The guidelines in this document can also be relevant to organizations acting as PII controllers. However, PII controllers can be subject to additional PII protection legislation, regulations and obligations, not applying to PII processors. This document is not intended to cover such additional obligations.
*
*
*
PDF
169,14 € koos KM-ga
Paber
169,14 € koos KM-ga
Standardi monitooring

Teised on ostnud veel

Põhitekst

ISO/IEC 27005:2018

Information technology -- Security techniques -- Information security risk management
Kehtetu alates 25.10.2022
Põhitekst

ISO/IEC 27017:2015

Information technology -- Security techniques -- Code of practice for information security controls based on ISO/IEC 27002 for cloud services
Uusim versioon Kehtiv alates 30.11.2015
Põhitekst

EVS-EN ISO/IEC 27001:2017

Infotehnoloogia. Turbemeetodid. Infoturbe halduse süsteemid. Nõuded
Kehtetu alates 15.08.2023
Põhitekst

EVS-EN ISO/IEC 27002:2017

Infotehnoloogia. Turbemeetodid. Infoturbemeetodite tavakoodeks
Kehtetu alates 01.12.2022