Governance, Risk and Compliance

ISO/IEC 27017 Compliance

Support in applying security controls relevant to cloud services.

Connecting requirements, responsibilities and protective controls.
AI-generated illustration

SCOPE OF WORK

The service

Support in applying security controls relevant to cloud services.

Service activities

  • Mapping services and responsibilities
  • Assessing cloud-specific controls
  • Improvement actions and documentation

The programme begins by assessing which requirements actually apply. Advisory support is not an attestation of compliance; any certification or accreditation is issued by the competent bodies under the relevant scheme.

How the project works

  1. 01
    Define

    Objectives, scope and responsibilities.

  2. 02
    Deliver

    Agreed activities and evidence collection.

  3. 03
    Report

    Findings, limitations and next steps.

Where to start

Describe the systems involved, the issue to address and the project contacts. In our initial discussion, we define objectives, required information and the approach to delivery.

Chat with us