Certification: ISO/IEC 27017:2015

ISO/IEC 27017:2015 Code of Practice for Information Security Controls

The ISO/IEC 27017:2015 is the information security gold standard for cloud service providers and their customers. It enables them to implement information security processes and procedures to ensure information stored in the cloud is safe and secure.

This international standard provides additional cloud-specific implementation guidance based on ISO/IEC 27002, as well as additional controls to address cloud-specific information security threats and risks referring to Clauses 5 to 18 in ISO/IEC 27002:2013 for controls, implementation guidance, and other information. ISO/IEC 27017 is unique in providing guidance for both cloud service providers and customers.

The scope of the OVHcloud ISO 27001 certification aligns to the controls in ISO/IEC 27017:2015 (“ISO 27017’) for the OVHcloud Services and Data Centers:

Services:

• Bare Metal Cloud
• Virtual Private Cloud
• Hosted Private Cloud
• Public Cloud

US Data Centers:

• Vint Hill, Virginia (East Coast)
• Hillsboro, Oregon (West Coast)

US customers utilizing OVHcloud international Data Centers requiring an ISO 27001 certificate should contact their sales representative.