The International Organization for Standardization (ISO) is an independent, nongovernmental organization that publishes standards in technical and nontechnical fields. The ISO/IEC 27000 series of standards is a joint effort with the International Electrotechnical Commission (IEC) and defines mechanisms to help organizations keep information assets secure.
The ISO/IEC 27018:2019 standard provides a set of guidelines for one of the most important aspects of internet security: the protection of personally identifiable information (PII)—any data information assets that can be linked to a specific individual.
The code of practices defined by the ISO/IEC 27018:2019 specification assures that an organization with ISO 27018 certification has assessed risks and put appropriate PII protections in place for their users.
Reports and other documentation
IBM ISO 27018 certificates are published and generally available. The services listed below are ISO 27018 certified. Services listed also issue ISO certificates at least once each year.
IBM applies ISO 27018 to our cloud-based products, offerings and services to enhance our Information Security Management System (ISMS) and ensure the same level of PII protection across each certified cloud service. IBM Services Documents (SD) indicate if a given offering maintains ISO 27018 certification.
Our ISO 27018 certificates demonstrate that IBM's cloud-based products and services have adopted best practices for the processing of PII.