Markdown Editor
에디터 열기

클라우드 보안 27017 및 27018 키트

ISO/IEC 27017 및 27018로 클라우드 서비스 보호: 클라우드 보안 정책, 27017 통제, SaaS 기준선, 보안 태세 검토, PII 처리자 통제, 종료 계획, 데이터센터 평가.

사용 순서에 따라 3단계로 정리한 템플릿 8개입니다. 편집기에서 템플릿을 열어 작성한 뒤 PDF, DOCX 또는 HTML로 내보낼 수 있습니다.

1단계

클라우드 보안

  1. Cloud Services Security Policy Template (ISO/IEC 27001 A.5.23)

    전체

    Cloud policy for A.5.23: shared responsibility, tiers, due diligence, contract terms, configuration, monitoring, exit, shadow IT, cloud register

    ISO/IEC 27001:2022 A.5.23 (cited only); ISO/IEC 27002:2022; ISO/IEC 27017:2026; ISO/IEC 27036-4:2016

  2. Cloud Service Controls Template (ISO/IEC 27017:2026)

    전체

    Cloud customer and provider controls: role determination, shared responsibility matrix, implementation table, extra cloud controls, disclosures, monitoring

    ISO/IEC 27001:2022 6.1.3, A.5.19 to A.5.23 (cited only); ISO/IEC 27017:2026; ISO/IEC 27002:2022

  3. SaaS Suite Security Baseline Template (Microsoft 365, Google Workspace)

    전체

    Admin roles, MFA, conditional access, external sharing, SPF, DKIM and DMARC, audit logging, retention, DLP and labels, app consent, quarterly tenant review

    ISO/IEC 27001:2022 A.5.15 to A.5.18, A.5.23, A.8.5, A.8.9, A.8.12, A.8.15, A.8.16 (cited only); ISO/IEC 27002:2022

  4. Cloud Security Posture Review Template (CSA CCM v4.1)

    전체

    Periodic cloud posture review: scope, shared responsibility, CSPM findings by CCM v4.1 domain, identity, exposure, data, logging, drift, risks, actions, trend

    CSA CCM v4.1 (domains and IDs); CIS Benchmarks named

  5. Cloud Security Reference Patterns Template (AWS SRA, MCSB, CCM v4.1)

    전체

    Cloud security patterns: shared responsibility, SRA accounts, identity, network, data, workload, logging, posture, provider equivalents, CCM v4.1 mapping

    AWS SRA (Jun 2026); Microsoft cloud security benchmark v2 (preview); Google enterprise foundations blueprint; CSA CCM v4.1
2단계

개인정보 보호

  1. Public Cloud PII Processor Controls Template (ISO/IEC 27018:2025)

    전체

    ISO/IEC 27018:2025 for cloud PII processors: customer commitments, transparency, sub-processors, deletion, disclosure requests, breach notice, control table

    ISO/IEC 27018:2025 (cited only); ISO/IEC 27002:2022; ISO/IEC 29100:2024
3단계

종료

  1. Cloud Exit Plan Template (ISO/IEC 27001 A.5.23, ISO/IEC 27036-4)

    전체

    Exit triggers, lock-in and data inventory, formats, strategy options, alternative providers, timeline, contract exit terms, runbook, exit tests, DORA, Data Act

    ISO/IEC 27001:2022 A.5.23 (cited only); ISO/IEC 27002:2022; ISO/IEC 27036-4:2016

  2. Data Centre and Colocation Assessment Template (ISO/IEC 27001)

    전체

    Facility profile, shared responsibility, evidence pack, weighted checklist (access, power, cooling, fire, contract, audit rights, climate), scoring, decision

    ISO/IEC 27001:2022 + Amd 1:2024 A.5.19 to A.5.22, A.5.30, A.7 (cited only); ISO/IEC 27002:2022