Cloud Security Controls
Code of practice providing guidance on information security controls for cloud services.
ISO 27017 is a guidance standard. It offers recommendations rather than auditable requirements, so no accredited body can certify an organisation to ISO 27017. Any claim of "ISO 27017 certification" should be treated with caution.
ISO 27017 provides guidance on information security controls for cloud computing services. It supplements ISO 27001/27002 with cloud-specific security controls.
There is no certification to pursue, but an experienced consultant can help you apply ISO 27017 alongside the management system standards you are certified to. Reading the published document is the best starting point.
This page summarises ISO 27017 (current published edition). Always confirm the detail against the published document.