Which of the following standards does a cloud service provider has to comply with, to...

ISO/IEC 27018 is a code of practice for cloud service providers that handle personally identifiable information (PII). It provides a framework for protecting the privacy of PII in the cloud, consistent with the privacy principles in ISO/IEC 29100 for the public cloud computing environment. This standard is particularly relevant for cloud service providers needing to demonstrate they have implemented effective privacy controls to protect their customers’ data. The adoption of ISO/IEC 27018 by a cloud service provider is a strong indication of compliance with privacy laws and regulations, ensuring the protection of personal information in the cloud123.

References:

ISO/IEC 27018 overview and compliance information as provided by Microsoft Learn1.

Details on ISO/IEC 27018 compliance by Google Cloud2.

General information about ISO 27018 for cloud providers from Schellman3.

EC-Council’s Certified Network Defender (CND) course content4.