Markdown Editor
Editor öffnen

Kit Cloud-Sicherheit 27017 und 27018

Cloud-Dienste mit ISO/IEC 27017 und 27018 absichern: Cloud-Sicherheitsrichtlinie, 27017-Kontrollen, SaaS-Baseline, Posture-Review, PII-Auftragsverarbeiterkontrollen, Exit-Plan und Rechenzentrumsbewertung.

8 Vorlagen in 3 Schritten, in der Reihenfolge der Nutzung. Öffnen Sie eine Vorlage im Editor, füllen Sie sie aus und exportieren Sie sie als PDF, DOCX oder HTML.

Schritt 1

Cloud-Sicherheit

  1. Cloud Services Security Policy Template (ISO/IEC 27001 A.5.23)

    Vollständig

    Cloud policy for A.5.23: shared responsibility, tiers, due diligence, contract terms, configuration, monitoring, exit, shadow IT, cloud register

    ISO/IEC 27001:2022 A.5.23 (cited only); ISO/IEC 27002:2022; ISO/IEC 27017:2026; ISO/IEC 27036-4:2016

  2. Cloud Service Controls Template (ISO/IEC 27017:2026)

    Vollständig

    Cloud customer and provider controls: role determination, shared responsibility matrix, implementation table, extra cloud controls, disclosures, monitoring

    ISO/IEC 27001:2022 6.1.3, A.5.19 to A.5.23 (cited only); ISO/IEC 27017:2026; ISO/IEC 27002:2022

  3. SaaS Suite Security Baseline Template (Microsoft 365, Google Workspace)

    Vollständig

    Admin roles, MFA, conditional access, external sharing, SPF, DKIM and DMARC, audit logging, retention, DLP and labels, app consent, quarterly tenant review

    ISO/IEC 27001:2022 A.5.15 to A.5.18, A.5.23, A.8.5, A.8.9, A.8.12, A.8.15, A.8.16 (cited only); ISO/IEC 27002:2022

  4. Cloud Security Posture Review Template (CSA CCM v4.1)

    Vollständig

    Periodic cloud posture review: scope, shared responsibility, CSPM findings by CCM v4.1 domain, identity, exposure, data, logging, drift, risks, actions, trend

    CSA CCM v4.1 (domains and IDs); CIS Benchmarks named

  5. Cloud Security Reference Patterns Template (AWS SRA, MCSB, CCM v4.1)

    Vollständig

    Cloud security patterns: shared responsibility, SRA accounts, identity, network, data, workload, logging, posture, provider equivalents, CCM v4.1 mapping

    AWS SRA (Jun 2026); Microsoft cloud security benchmark v2 (preview); Google enterprise foundations blueprint; CSA CCM v4.1
Schritt 2

Datenschutz

  1. Public Cloud PII Processor Controls Template (ISO/IEC 27018:2025)

    Vollständig

    ISO/IEC 27018:2025 for cloud PII processors: customer commitments, transparency, sub-processors, deletion, disclosure requests, breach notice, control table

    ISO/IEC 27018:2025 (cited only); ISO/IEC 27002:2022; ISO/IEC 29100:2024
Schritt 3

Ausstieg

  1. Cloud Exit Plan Template (ISO/IEC 27001 A.5.23, ISO/IEC 27036-4)

    Vollständig

    Exit triggers, lock-in and data inventory, formats, strategy options, alternative providers, timeline, contract exit terms, runbook, exit tests, DORA, Data Act

    ISO/IEC 27001:2022 A.5.23 (cited only); ISO/IEC 27002:2022; ISO/IEC 27036-4:2016

  2. Data Centre and Colocation Assessment Template (ISO/IEC 27001)

    Vollständig

    Facility profile, shared responsibility, evidence pack, weighted checklist (access, power, cooling, fire, contract, audit rights, climate), scoring, decision

    ISO/IEC 27001:2022 + Amd 1:2024 A.5.19 to A.5.22, A.5.30, A.7 (cited only); ISO/IEC 27002:2022