SECURO CERT

Management system certification

ISO/IEC 27017:2015

A cloud-specific control set covering the split of responsibility between cloud provider and cloud customer — virtual machine hardening, administrative segregation, tenant isolation.

Estimate audit duration See certified organisations

What you receive

Certificate of Registration (sector extension)

Issued only by a body accredited to ISO/IEC 17021-1, alongside 27001.

Who needs it

Cloud service providers, and cloud customers whose auditors will not accept a generic 27001 scope for a platform business.

Prerequisites

A current or concurrent ISO/IEC 27001 certification.

How this engagement is delivered

Delivery mode — Direct

Audited and certified by Securo Cert LLC.

Accredited artifact

The partner body is named in the proposal before any work begins, and printed on the resulting document alongside the delivery mode.

Frequent questions

What do we actually receive?

Certificate of Registration (sector extension). Issued only by a body accredited to ISO/IEC 17021-1, alongside 27001.

How long is it valid?

Aligned to the underlying 27001 cycle.

What has to be in place first?

A current or concurrent ISO/IEC 27001 certification.