ISO/IEC 27018

ISO/IEC 27018

Protecting personally identifiable information in the public cloud

Virtual Online Trainings for you on our Connected Learning Live Platform
Connect with us : +91 80815 80815

Protecting personally identifiable information in the public cloud

Virtual Online Trainings for you on our Connected Learning Live Platform
Connect with us : +91 80815 80815

Red Overlay
ISO/IEC 27018
ISO/IEC 27018
Red Overlay

ISO/IEC 27018 Information technology - Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors

The cloud offers organizations and consumers a variety of benefits: cost savings, flexibility and mobile access to information top the list. It also raises concerns about data protection and privacy; particularly around personally identifiable information (PII). PII includes any piece of information that can identify a specific user. The more obvious examples include names and contact details or your mother’s maiden name. But ones people may not readily think of are medical records, IP addresses and banking statements.

Used with ISO/IEC 27001, ISO/IEC 27018 has been published to allow Cloud Service Providers whose infrastructure is certified to the standard to tell their existing and potential customers that their data is safeguarded and won’t be used for any purposes for which they don’t specifically give consent.





ISO/IEC 27018 Training Course

This course is aimed at assisting cloud service providers and their customers understand the additional guidance and controls contained within ISO/IEC 27018. The additional controls will enable providers and their customers to comply with any applicable legislation and regulations and better protect information when processing PII in the Cloud.

ISO/IEC 27018:2014 Protection of Personally Identifiable Information (PII) in Public Clouds Training Course >

This course is aimed at both cloud service providers and customers who are engaging with a cloud service provider.

The course will help to ensure that the appropriate information security controls are in place for protecting PII processed by cloud service providers under contract to their customers.

1 day classroom based training course


How our BSI verification works

The PAS 2060 standard specifies a four-stage process to demonstrate carbon neutrality. This involves:

  • Assessment of GHG emissions based on accurate measurement data
  • Reduction of emissions through a target-driven carbon management plan
  • Offsetting of excess emissions, often by purchasing carbon credits
  • Documentation and verification through qualifying explanatory statements and public disclosure.

 

Through independent BSI verification to PAS 2060, your business can demonstrate that it has met these requirements. You can show you are serious about sustainability, responding to the challenge of climate change and contributing to the UNSDGs, while enhancing your organization’s performance and resilience.