ISO/IEC 27018 Code of Practice for Protecting Personal Data in the Cloud

The International Organization for Standardization (ISO) is an independent nongovernmental organization and the world’s largest developer of voluntary international standards. The ISO/IEC 27000 family of standards helps organizations of every type and size keep information assets secure.

In 2014, the ISO adopted ISO/IEC 27018:2014, an addendum to ISO/IEC 27001, the first international code of practice for cloud privacy. Based on EU data-protection laws, it gives specific guidance to cloud service providers (CSPs) acting as processors of personally identifiable information (PII) on assessing risks and implementing state-of-the-art controls for protecting PII.

This is an annual audit.
 

This certification applies to:

• Hosted Private Cloud –process started in the US 
• vCloud® Air™ powered by OVH data centers worldwide