ISO 27017 helps reduce security risk, strengthen compliance, and streamline vendor management
Junglemap has been issued an ISO 27017 certification on cloud security. Three quick questions to Geir Aasen, Junglemap CISO, on this new ISO-certification.
Junglemap already has an ISO 27001 certification. What is the difference between these two standards?
- ISO 27001 is the foundation for our security management system, providing controls that cover all operational areas. ISO 27017 further enhances these controls by specifically addressing cloud security, an area that is particularly important to SaaS customers.
What are the benefits for Junglemap customers?
- The ISO 27017 certification shows that we offer a strong cloud protection for our NanoLearning platform. The standard guides us to address and implement cloud specific measures; ranging from access management, event logging, cryptographic controls, vendor management and incident response. It also establishes a clear division of responsibilities between us as a SaaS provider, our customers, and our hosting provider. It increases trust and transparency, and it also helps customers to meet their own security and compliance requirements.
But hasn’t Junglemap always had a strong cloud security?
- Yes, of course we have. Security has always been very important for Junglemap and what we do. By maintaining certification for ISO 27001 and now added ISO 27017 Junglemap demonstrates a strong commitment to cloud security, giving our customers assurance that their data are protected and operations are handled according to international recognised best security practices.
