Markdown Editor
Buka editor

Kit keamanan cloud 27017 dan 27018

Amankan layanan cloud dengan ISO/IEC 27017 dan 27018: kebijakan keamanan cloud, kontrol 27017, baseline SaaS, tinjauan postur, kontrol pemroses PII, rencana keluar, dan penilaian pusat data.

8 templat dalam 3 langkah, sesuai urutan penggunaan. Buka templat mana pun di editor, isi, lalu ekspor ke PDF, DOCX, atau HTML.

Langkah 1

Keamanan cloud

  1. Cloud Services Security Policy Template (ISO/IEC 27001 A.5.23)

    Lengkap

    Cloud policy for A.5.23: shared responsibility, tiers, due diligence, contract terms, configuration, monitoring, exit, shadow IT, cloud register

    ISO/IEC 27001:2022 A.5.23 (cited only); ISO/IEC 27002:2022; ISO/IEC 27017:2026; ISO/IEC 27036-4:2016

  2. Cloud Service Controls Template (ISO/IEC 27017:2026)

    Lengkap

    Cloud customer and provider controls: role determination, shared responsibility matrix, implementation table, extra cloud controls, disclosures, monitoring

    ISO/IEC 27001:2022 6.1.3, A.5.19 to A.5.23 (cited only); ISO/IEC 27017:2026; ISO/IEC 27002:2022

  3. SaaS Suite Security Baseline Template (Microsoft 365, Google Workspace)

    Lengkap

    Admin roles, MFA, conditional access, external sharing, SPF, DKIM and DMARC, audit logging, retention, DLP and labels, app consent, quarterly tenant review

    ISO/IEC 27001:2022 A.5.15 to A.5.18, A.5.23, A.8.5, A.8.9, A.8.12, A.8.15, A.8.16 (cited only); ISO/IEC 27002:2022

  4. Cloud Security Posture Review Template (CSA CCM v4.1)

    Lengkap

    Periodic cloud posture review: scope, shared responsibility, CSPM findings by CCM v4.1 domain, identity, exposure, data, logging, drift, risks, actions, trend

    CSA CCM v4.1 (domains and IDs); CIS Benchmarks named

  5. Cloud Security Reference Patterns Template (AWS SRA, MCSB, CCM v4.1)

    Lengkap

    Cloud security patterns: shared responsibility, SRA accounts, identity, network, data, workload, logging, posture, provider equivalents, CCM v4.1 mapping

    AWS SRA (Jun 2026); Microsoft cloud security benchmark v2 (preview); Google enterprise foundations blueprint; CSA CCM v4.1
Langkah 2

Privasi

  1. Public Cloud PII Processor Controls Template (ISO/IEC 27018:2025)

    Lengkap

    ISO/IEC 27018:2025 for cloud PII processors: customer commitments, transparency, sub-processors, deletion, disclosure requests, breach notice, control table

    ISO/IEC 27018:2025 (cited only); ISO/IEC 27002:2022; ISO/IEC 29100:2024
Langkah 3

Keluar

  1. Cloud Exit Plan Template (ISO/IEC 27001 A.5.23, ISO/IEC 27036-4)

    Lengkap

    Exit triggers, lock-in and data inventory, formats, strategy options, alternative providers, timeline, contract exit terms, runbook, exit tests, DORA, Data Act

    ISO/IEC 27001:2022 A.5.23 (cited only); ISO/IEC 27002:2022; ISO/IEC 27036-4:2016

  2. Data Centre and Colocation Assessment Template (ISO/IEC 27001)

    Lengkap

    Facility profile, shared responsibility, evidence pack, weighted checklist (access, power, cooling, fire, contract, audit rights, climate), scoring, decision

    ISO/IEC 27001:2022 + Amd 1:2024 A.5.19 to A.5.22, A.5.30, A.7 (cited only); ISO/IEC 27002:2022