ISO 27017/ISO 27018 FastTrack™ 20

Secure your Cloud services

Our ISO 27017/ISO 27018 FastTrack™ 20 consultancy service is a bolt-on service to our ISO 27001 FastTrack™ 20. It extends your ISMS (information security management system) following the guidance of two additional ISO standards relating to Cloud security: ISO/IEC 27017:2015 and ISO/IEC 27018:2019.

Product overview

A qualified consultant will work with you to extend your current ISMS to meet the requirements and controls set out in ISO 27017 and ISO 27018. This service includes:

• A review of your risk assessments and risk documentation to meet the requirements of the Cloud standards using Cyber Comply which is part of the subscriptions included within ISO 27001 FastTrack™ 20
• Developing your documentation to meet the requirements with a specialised toolkit which is also part of your Cyber Comply subscription, which contains essential ISO 27017- and ISO 27018-compliant policies and procedures; and
• A review of your Statement of Applicability to reflect additional ISO 27017 and ISO 27018 controls.

Why choose IT Governance?

• We have an in-depth understanding of ISO 27001’s requirements and how supporting standards and codes of practices should be integrated.
• Our specialist team has extensive information security management project expertise, both in the UK and globally.
• Our transparent proposals are fixed price, so you won’t get any surprises.
• You will have access to a dedicated account manager throughout the project.

Conditions

In line with our other FastTrack 20 services, this service applies to organisations that have a relatively low information security risk profile and 20 or fewer employees, including the CEO and management/executive team, based at a single site.

This service is delivered online, but can be delivered on-site if required. Consultancy expenses associated with travel and accommodation will be billed separately.

You will be required to maintain subscriptions to CyberComply (for access to the ISO 27017/27018 Documentation Toolkit) and the elearning courses included in ISO 27001 FastTrack 20 for the duration of the contract.