ISO27018

ISO 27017 and ISO 27018 certifications are extensions of ISO 27001. While ISO 27001 focuses on information security in general, ISO 27017 and ISO 27018 focus on cloud services. ISO 27017 focuses on information security in the cloud, while ISO 27018 focuses on protecting privacy within cloud services.

Benefits of ISO 27018 certification for the organisation

Just as ISO 27001 supports companies in gaining control over information security, ISO 27017 specifically supports cloud security. The same applies to ISO 27018 certification privacy assessments. Because these standards are so closely related, they can easily be combined into a single, integrated management system. This, in turn, reduces the administrative burden on organisations. A second advantage is the commercial value: With a certified privacy management system, you demonstrate to your (potential) customers that you are committed to protecting privacy. This is a powerful signal, especially in a world where cloud services are widely used

ISO27018 certificering, ISO27018 Toetsing, ISO27018 audit

Contact us

Do you have questions about an ISO 27018 audit, or have your customers requested an assurance statement? Or would you like to discuss the possibilities for improving the control of your own processes? We would be happy to discuss the possibilities with you.

ISO27018 certificering, ISO27018 Toetsing, ISO27018 audit

Benefits of a Mathison auditor

The auditor will assess the organisation to determine whether it meets the standard’s requirements and is therefore eligible for certification.

However, Mathison believes an auditor does more. We consider the auditor part of the client’s security team, and our goal is to identify compliance and areas for further improvement. A good audit therefore provides insight into not only the negative aspects but also the positive ones. This allows you to better focus your time and resources on improvements.

A good auditor also has insight into the subject matter and an understanding of your organisation’s context. This includes not only the standard but also the development of your organisation and the risks that apply to you. With Mathison, you get auditors with years of experience in the field, making us well-placed to engage in substantive discussions with your employees.