Uso das normas NBR ISO/IEC 27017 e 27018 para garantir a segurança da computação em nuvem

Abstract

The objective of this work was to address the main concepts and characteristics of cloud computing, as well as the vulnerabilities and threats related to the security of the cloud environment. Cloud computing is a technology that has gained a lot of attention due to the fact that it meets some of the main requirements that companies highlight. Despite the advantages of its use, it is important to be aware of security issues. In this context, there are the NBR ISO/IEC 27017 and 27018 standards, which are good practice guidelines to ensure security in the cloud environment and confidential data stored there. According to the methodological procedures, this research is bibliographic. The studies concluded that the implementation of ISO/IEC 27017 and 27018 standards in cloud environments plays a fundamental role in ensuring data security and privacy, reinforces the trust of those involved and helps maintain compliance with regulations. By adopting these standards, organizations become more prepared to face the growing challenges associated with managing information in the cloud.