System Certification

ISO/IEC 27018 - Information Technology - PII in Public Clouds

Giving customers confidence in sharing their personal information with your organization.

The cloud offers organizations and consumers a variety of benefits: cost savings, flexibility and mobile access to information top the list

It also raises concerns about data protection and privacy; particularly around personally identifiable information (PII).

PII includes any piece of information that can identify a specific user. The more obvious examples include names and contact details or your mother’s maiden name. But ones people may not readily think of are medical records, IP addresses and banking statements.

Used with ISO/IEC 27001, ISO/IEC 27018 has been published to allow Cloud Service Providers whose infrastructure is certified to the standard to tell their existing and potential customers that their data is safeguarded and won’t be used for any purposes for which they don’t specifically give consent.

Build confidence and strengthen trust with customers

With the most rigorous safeguards in place for cloud-specific technologies, your ability to protect PII is significantly enhanced.

Establishes objectives, controls and guidelines for implementing measures to protect PII.
Promotes compliance with regulatory requirements for the protection of PII.
Creates competitive differentiation by inspiring customer trust through reliability and consistency.
Applies to all types and sizes of organizations: public, private, government and not-for-profit.