Public Cloud Providers, Cloud Service Customers and Data Principles
It’s important to understand the scope of your services within the principles of ISO 27018. The Standard is intended for Public Cloud Providers where Customers use the facility to store or process the PII they hold.
In this respect, some of the data protection obligations to the Data Principle (the individual person) are placed on the Cloud Service Customer – that is the entity using the Public Cloud Provider.
ISO 27001 + ISO 27018
ISO 27001 the standard for information security is a good place to start as this provides a framework for managing information security risks, and there is also the benefit of achieving a recognised Certification to this Standard.
If ISO 27001 is already embedded in the organisation, the extended control set in ISO 27018 is a good improvement to focus on risks related to personal data in the provider’s public cloud.
Assent have ISO 27018 Consultants who can help you understand the standard, implement the recommended controls in addition to ISO 27001 and measure/reduce risk to personal data.
ISO 27018 Gap Analysis
Many organisations find an ISO 27018 Gap Analysis a good first step, and our Consultants can work with you to identify gaps in your current documentation and processes.
Prepare for GDPR
Many of the Privacy Principles within ISO 27018 can help you work towards the General Data Protection Regulations. Find out more about GDPR.
Get Started with ISO 27018
ISO 27018 Case Studies
Darktrace Adds ISO 42001 to ISO 27001 and ISO 27018
Assent Risk Management has maintained a long-standing relationship with Darktrace, a global leader in cybersecurity AI, providing support for their ISO 27001 and ISO 27018…
CANCOM
CANCOM UK helps their clients benefit from Digital Transformation worldwide. They support corporate and public sector organisations with their award-winning IT products, solutions and services.…
Why Choose Us for ISO 27018?
ISO 27018 Testimonials
“Darktrace set its sights on becoming one of the first AI cybersecurity vendors to achieve ISO 42001:2023 – a standard that the industry was still trying to get it’s head around at the time we started our journey.
Assent’s support in both implementing a new [AI] management system, and auditing against the requirements of the newly published ISO 42001 standard played a vital role in ensuring Darktrace was ready to proceed with the Stage 1 and Stage 2 audits, and ultimately, achieve certification with the British Standards Institution (BSI), amongst some of the first in our industry.
Thanks to our long-standing relationship with Garry Renton and the team at Assent, we were able to comprehensively break down and implement the requirements of the standard and use Garry’s existing knowledge of our management system to our advantage. This helped speed up the process by drawing out any issues and closing gaps early on. ISO 42001 is a critical milestone for Darktrace as we continue to mature our governance and compliance framework. This achievement expands Darktrace’s current certified compliance framework, which includes our ISO 27001:2022 and ISO 27018:2019 certifications – all of which Assent has been instrumental in providing support, expertise and auditing over the years.”
“Garry was professional, fair and thorough. He has a great audit style and technique.
Jazmin is very pleasant to deal with and efficient; audits with both Rob and Garry have definitely had the ‘human touch’ – great relationship building and a more personal approach.”
