Markdown Editor
打开编辑器

云安全 27017 与 27018 套件

依据 ISO/IEC 27017 和 27018 保护云服务：云安全方针、27017 控制、SaaS 基线、安全态势评审、PII 处理者控制、退出计划与数据中心评估。

8 个模板，按使用顺序分为 3 步。在编辑器中打开任一模板，填写后可导出为 PDF、DOCX 或 HTML。

第 1 步

云安全

  1. Cloud Services Security Policy Template (ISO/IEC 27001 A.5.23)

    完整

    Cloud policy for A.5.23: shared responsibility, tiers, due diligence, contract terms, configuration, monitoring, exit, shadow IT, cloud register

    ISO/IEC 27001:2022 A.5.23 (cited only); ISO/IEC 27002:2022; ISO/IEC 27017:2026; ISO/IEC 27036-4:2016

  2. Cloud Service Controls Template (ISO/IEC 27017:2026)

    完整

    Cloud customer and provider controls: role determination, shared responsibility matrix, implementation table, extra cloud controls, disclosures, monitoring

    ISO/IEC 27001:2022 6.1.3, A.5.19 to A.5.23 (cited only); ISO/IEC 27017:2026; ISO/IEC 27002:2022

  3. SaaS Suite Security Baseline Template (Microsoft 365, Google Workspace)

    完整

    Admin roles, MFA, conditional access, external sharing, SPF, DKIM and DMARC, audit logging, retention, DLP and labels, app consent, quarterly tenant review

    ISO/IEC 27001:2022 A.5.15 to A.5.18, A.5.23, A.8.5, A.8.9, A.8.12, A.8.15, A.8.16 (cited only); ISO/IEC 27002:2022

  4. Cloud Security Posture Review Template (CSA CCM v4.1)

    完整

    Periodic cloud posture review: scope, shared responsibility, CSPM findings by CCM v4.1 domain, identity, exposure, data, logging, drift, risks, actions, trend

    CSA CCM v4.1 (domains and IDs); CIS Benchmarks named

  5. Cloud Security Reference Patterns Template (AWS SRA, MCSB, CCM v4.1)

    完整

    Cloud security patterns: shared responsibility, SRA accounts, identity, network, data, workload, logging, posture, provider equivalents, CCM v4.1 mapping

    AWS SRA (Jun 2026); Microsoft cloud security benchmark v2 (preview); Google enterprise foundations blueprint; CSA CCM v4.1
第 2 步

隐私

  1. Public Cloud PII Processor Controls Template (ISO/IEC 27018:2025)

    完整

    ISO/IEC 27018:2025 for cloud PII processors: customer commitments, transparency, sub-processors, deletion, disclosure requests, breach notice, control table

    ISO/IEC 27018:2025 (cited only); ISO/IEC 27002:2022; ISO/IEC 29100:2024
第 3 步

退出

  1. Cloud Exit Plan Template (ISO/IEC 27001 A.5.23, ISO/IEC 27036-4)

    完整

    Exit triggers, lock-in and data inventory, formats, strategy options, alternative providers, timeline, contract exit terms, runbook, exit tests, DORA, Data Act

    ISO/IEC 27001:2022 A.5.23 (cited only); ISO/IEC 27002:2022; ISO/IEC 27036-4:2016

  2. Data Centre and Colocation Assessment Template (ISO/IEC 27001)

    完整

    Facility profile, shared responsibility, evidence pack, weighted checklist (access, power, cooling, fire, contract, audit rights, climate), scoring, decision

    ISO/IEC 27001:2022 + Amd 1:2024 A.5.19 to A.5.22, A.5.30, A.7 (cited only); ISO/IEC 27002:2022