Frameworks / Security / Profiles
Cloud Security & Privacy
Included in Information Security · Anchored on ISO/IEC 27001 · Incorporates ISO/IEC 27002, NIST CSF 2.0, SOC 2 (AICPA TSC), CIS Controls, PCI DSS, ISO/IEC 27017, ISO/IEC 27018
Cloud-specific security and personal-data controls for cloud customers and providers, extending an ISO/IEC 27001 programme.
The standard tells you what is required; the framework tells you how to do it, whether you've done enough to certify, and how to keep getting better.
Included in
Information Security
Information Security incorporates ISO/IEC 27017 as a Secondary standard, where the Primary leaves gaps; the profile shows the controls that cite it.
Anchored on ISO/IEC 27001 · Incorporates ISO/IEC 27002, NIST CSF 2.0, SOC 2 (AICPA TSC), CIS Controls, PCI DSS, ISO/IEC 27017, ISO/IEC 27018
A profile isn't sold on its own: it comes with the topic framework, in the Core and Professional editions. In APEX, it is the Certification view filtered to ISO/IEC 27017.
Need to govern against ISO/IEC 27017?
Tell us where your programme is today and we'll point you to the right framework and edition.
Enquire about Information SecurityStandards are referenced by clause, not reproduced. Names of standards and laws are trademarks of their owners; DP Frameworks is not affiliated with or endorsed by any standards body or regulator. Frameworks support governance and readiness; they are not legal advice or a regulatory submission.