QuestionQ292

Designing for security and compliance

Your organization is deploying a new cloud-native application on Google Cloud and must ensure alignment with the ISO/IEC 27001 framework. You want to use Google Cloud security reports and documentation to help support your ISO/IEC 27001 audit process. What should you do?

  • A Engage an independent auditor to conduct an ISO/IEC 27001 audit of your organization's Google Cloud implementation.
  • B Download the ISO/IEC 27001 report for Google Cloud through internet search.
  • C Review the Compliance Reports Manager for information about ISO/IEC 27001 compliance and related documentation on obtaining reports through your Google Cloud account.
  • D Utilize the Cloud Audit Logs service for accessing and requesting the ISO/IEC 27001 reports.
Explanation

Google Cloud makes ISO/IEC 27001 certificates and related compliance resources available through Compliance Reports Manager, including guidance on obtaining reports through a Google Cloud account. These materials can help an organization understand Google Cloud’s covered controls, while the organization remains responsible for its own ISO/IEC 27001 implementation and certification.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!