Markdown Editor
エディターを開く

クラウドセキュリティ27017・27018キット

ISO/IEC 27017・27018によるクラウドサービスの保護：クラウドセキュリティ方針、27017管理策、SaaSベースライン、態勢レビュー、PII処理者管理策、出口計画、データセンター評価。

8 件のテンプレートを、使う順に 3 ステップで並べています。エディターで開いて記入し、PDF、DOCX、HTML に書き出せます。

ステップ 1

クラウドセキュリティ

  1. Cloud Services Security Policy Template (ISO/IEC 27001 A.5.23)

    フル

    Cloud policy for A.5.23: shared responsibility, tiers, due diligence, contract terms, configuration, monitoring, exit, shadow IT, cloud register

    ISO/IEC 27001:2022 A.5.23 (cited only); ISO/IEC 27002:2022; ISO/IEC 27017:2026; ISO/IEC 27036-4:2016

  2. Cloud Service Controls Template (ISO/IEC 27017:2026)

    フル

    Cloud customer and provider controls: role determination, shared responsibility matrix, implementation table, extra cloud controls, disclosures, monitoring

    ISO/IEC 27001:2022 6.1.3, A.5.19 to A.5.23 (cited only); ISO/IEC 27017:2026; ISO/IEC 27002:2022

  3. SaaS Suite Security Baseline Template (Microsoft 365, Google Workspace)

    フル

    Admin roles, MFA, conditional access, external sharing, SPF, DKIM and DMARC, audit logging, retention, DLP and labels, app consent, quarterly tenant review

    ISO/IEC 27001:2022 A.5.15 to A.5.18, A.5.23, A.8.5, A.8.9, A.8.12, A.8.15, A.8.16 (cited only); ISO/IEC 27002:2022

  4. Cloud Security Posture Review Template (CSA CCM v4.1)

    フル

    Periodic cloud posture review: scope, shared responsibility, CSPM findings by CCM v4.1 domain, identity, exposure, data, logging, drift, risks, actions, trend

    CSA CCM v4.1 (domains and IDs); CIS Benchmarks named

  5. Cloud Security Reference Patterns Template (AWS SRA, MCSB, CCM v4.1)

    フル

    Cloud security patterns: shared responsibility, SRA accounts, identity, network, data, workload, logging, posture, provider equivalents, CCM v4.1 mapping

    AWS SRA (Jun 2026); Microsoft cloud security benchmark v2 (preview); Google enterprise foundations blueprint; CSA CCM v4.1
ステップ 2

プライバシー

  1. Public Cloud PII Processor Controls Template (ISO/IEC 27018:2025)

    フル

    ISO/IEC 27018:2025 for cloud PII processors: customer commitments, transparency, sub-processors, deletion, disclosure requests, breach notice, control table

    ISO/IEC 27018:2025 (cited only); ISO/IEC 27002:2022; ISO/IEC 29100:2024
ステップ 3

撤退

  1. Cloud Exit Plan Template (ISO/IEC 27001 A.5.23, ISO/IEC 27036-4)

    フル

    Exit triggers, lock-in and data inventory, formats, strategy options, alternative providers, timeline, contract exit terms, runbook, exit tests, DORA, Data Act

    ISO/IEC 27001:2022 A.5.23 (cited only); ISO/IEC 27002:2022; ISO/IEC 27036-4:2016

  2. Data Centre and Colocation Assessment Template (ISO/IEC 27001)

    フル

    Facility profile, shared responsibility, evidence pack, weighted checklist (access, power, cooling, fire, contract, audit rights, climate), scoring, decision

    ISO/IEC 27001:2022 + Amd 1:2024 A.5.19 to A.5.22, A.5.30, A.7 (cited only); ISO/IEC 27002:2022