Free ebook: NIS2 ready using ISO 27001 best practices
Download ebook

Documentation of data owned by cloud service customers

Critical
High
Normal
Low

When offering cloud services for customers, the organisation should have identified and listed data related to cloud services the customer controls. These are referred to external data stores.

Organisation also needs to inventory derived data that is created through offering the cloud service. These can be controlled by the organisation and listed on system documentation instead of external data stores.

Connected other frameworks and requirements:
8.1.1: Inventory of assets
ISO 27017
No items found.