🛡️ Free practice test question from: Cloud-specific standard (Security+)

ISO/IEC 27017 is specifically designed to provide guidelines for information security controls applicable to the provision and use of cloud services. It addresses cloud-specific aspects such as data isolation, multi-tenancy, and the shared responsibilities between cloud service providers and customers.

ISO 27002 is a general standard for information security controls and does not focus exclusively on cloud environments.

ISO/IEC 27018 is centered on the protection of personally identifiable information (PII) in public clouds acting as PII processors, focusing more on privacy rather than comprehensive cloud security controls.

NIST SP800-53 provides a broad set of security and privacy controls for federal information systems and organizations but is not specifically tailored to cloud environments.