oneuptime/Home/Views/iso-27018.ejs

46 lines
2.0 KiB
Plaintext

<header id="pagmt">
<h1>ISO/IEC 27018:2014</h1>
<p>Information technology — Security techniques — Code of practice for protection of personally identifiable
information (PII) in public clouds acting as PII processors</p>
</header>
<section>
<h3>Introduction</h3>
<p>
ISO/IEC 27018:2014 establishes commonly accepted control objectives, controls and guidelines for implementing
measures to protect Personally Identifiable Information (PII) in accordance with the privacy principles in
ISO/IEC
29100 for the public cloud computing environment.
<br /><br />
In particular, ISO/IEC 27018:2014 specifies guidelines based on ISO/IEC 27002, taking into consideration the
regulatory requirements for the protection of PII which might be applicable within the context of the
information
security risk environment(s) of a provider of public cloud services.
<br /><br />
ISO/IEC 27018:2014 is applicable to all types and sizes of organizations, including public and private
companies,
government entities, and not-for-profit organizations, which provide information processing services as PII
processors via cloud computing under contract to other organizations.
<br /><br />
The guidelines in ISO/IEC 27018:2014 might also be relevant to organizations acting as PII controllers; however,
PII
controllers can be subject to additional PII protection legislation, regulations and obligations, not applying
to
PII processors. ISO/IEC 27018:2014 is not intended to cover such additional obligations.
<br /><br /></p>
<p><a href="https://www.iso.org/standard/61498.html" rel="noreferrer" target="_blank">Click here to read more.</a>
</p>
<h3>Certificate of Registration</h3>
<p>OneUptime has achieved ISO 27018 compliance. </p>
<p>
To request the certificate please
contact: iso@oneuptime.com</p>
</section>