Let’s Go Back to the Basics: How ISO 27001 Certification Works

In this article for Cloud Security Alliance, Yehia (Ian) Ahmed explains ISO 27001 through the lens of risk management, rather than a uniform checklist.

He considers cloud providers’ shared responsibilities and the role of CSA (Cloud Security Alliance)’s Cloud Controls Matrix and STAR (Security, Trust, Assurance and Risk) programme. Read the original for his full perspective.